last executing test programs: 4m29.206078511s ago: executing program 3 (id=589): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES64=r0], 0x18}}, 0x2080) 4m29.141866847s ago: executing program 3 (id=591): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe2(&(0x7f0000000040), 0x0) unshare(0x20000400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0040d07, 0x0) 4m28.814110872s ago: executing program 3 (id=593): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="47344004d22274b41717b4d539353f858898ffae5cdbfa8e6195b7e8afc3c69bc7e1", @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup, 0xffffffffffffffff, 0x2f, 0x202c, 0x4, @void, @void, @value=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000005"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=@gettaction={0x14, 0x32, 0xa022f50b30a47c09, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x200000d1}, 0x2466500590600154) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket$igmp(0x2, 0x3, 0x2) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x263, 0x8000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYRES16=r2], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x10004880) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 4m28.198064295s ago: executing program 3 (id=599): syz_clone3(&(0x7f0000003900)={0x80100, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0), {0x5}, &(0x7f0000000640)=""/189, 0xbd, &(0x7f00000002c0)=""/224, &(0x7f00000038c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x58) 4m28.046250901s ago: executing program 3 (id=600): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4c}, 0x1c) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8018, 0x1f7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r2, &(0x7f0000004440)) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000180)={0x268, 0x1, 0x5, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [{{0x254, 0x1, {{0x2, 0x6}, 0xa, 0x1b, 0x2, 0x4, 0x1, 'syz0\x00', "1f1b17c36d7d393a4e6f649cb02cdc6599b7be65b7a582c08db730726ae94b27", "ed9e7cf478110a107b6b389d12068bcd4b8c753a206048c6698ec5f18838f529", [{0x8, 0x9137, {0x1, 0x1}}, {0xdaf, 0x8000, {0x3, 0xfff}}, {0x5, 0x1, {0x3, 0x7}}, {0x80, 0x7, {0x1, 0x9}}, {0x2, 0x5, {0x2, 0x8001}}, {0x5, 0x7e8, {0x0, 0x25505826}}, {0x101, 0x4, {0x3, 0x4}}, {0xfff, 0x3, {0x0, 0x40000000}}, {0x200, 0x100, {0x2, 0x6}}, {0x5, 0x7fff, {0x2, 0x1}}, {0x9, 0x2, {0x0, 0x2}}, {0x5, 0x80, {0x2, 0x7}}, {0x2, 0x4, {0x2, 0x3}}, {0x4, 0x7, {0x3, 0x400}}, {0x501, 0x5}, {0x594, 0xfff4, {0x0, 0xc6}}, {0x4, 0x1, {0x0, 0x7}}, {0x9, 0x7fff, {0x3, 0x8000000}}, {0x9, 0xa, {0x3, 0x200}}, {0x0, 0x4, {0x3, 0x3ff}}, {0xff, 0x6, {0xbfa5bdd6140c118, 0x6}}, {0xff, 0x2, {0x1, 0x4}}, {0x6, 0xfff, {0x1, 0x1ff}}, {0x2043, 0x5, {0x3, 0xf52}}, {0x3, 0x39, {0x2, 0x7}}, {0x200, 0x8, {0x1, 0x14}}, {0x3, 0x9, {0x1, 0x5}}, {0x8, 0x4, {0x2, 0x40}}, {0x68, 0x7fff, {0x1, 0x6}}, {0x4, 0x9, {0x3, 0x3}}, {0x6, 0xc1f, {0x2, 0x3}}, {0x2, 0x713, {0x2, 0x8}}, {0x6, 0xf108, {0x2}}, {0x9, 0x6, {0x2, 0x80000000}}, {0x7, 0x7, {0x0, 0xf}}, {0xfff, 0x6, {0x2, 0x8}}, {0x242b, 0x5, {0x0, 0x5a7c}}, {0x1, 0x4, {0x1, 0x5}}, {0x7, 0xfff9, {0x3, 0xe}}, {0x6, 0x800, {0x0, 0x5}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20000010) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000000240)) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_LINKAT={0x27, 0x18, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0x0, 0x1000001, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040), 0x0) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000000140)={&(0x7f0000dfc000/0x3000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x3000}) 4m26.946567523s ago: executing program 3 (id=604): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2"], 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000407d1e383100000000000109022400010000100309040002fe0300000009210000020122050009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x7, 0x10, 0x13e, 0x89, 0xffffffff, 0x2}) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f5f2829289423debbb86f292c4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f926"}]}]}, 0xe0}], 0x1}, 0x40040) 4m11.682172652s ago: executing program 32 (id=604): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2"], 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000407d1e383100000000000109022400010000100309040002fe0300000009210000020122050009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x7, 0x10, 0x13e, 0x89, 0xffffffff, 0x2}) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f5f2829289423debbb86f292c4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f926"}]}]}, 0xe0}], 0x1}, 0x40040) 7.260446081s ago: executing program 2 (id=1812): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000140)={0xc}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_GET_API_VERSION(r0, 0x3b64) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x3) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000280)={0x20, 0x700, &(0x7f00000002c0)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000300)={0x18, 0x0, 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000340)={0x18, r1}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000380)={0x8, r1}) close(r0) 7.219633032s ago: executing program 2 (id=1813): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') r1 = syz_usb_connect$midi(0x0, 0x61, &(0x7f0000000880)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1005, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x8, 0x10, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x0, 0xff, [@ms_header={0x7, 0x24, 0x1, 0x1, 0x7}], [{{0x9, 0x5, 0x2, 0xc, 0x3ff, 0xe, 0x4, 0x3, {0x7, 0x25, 0x1, 0x3, "59e142"}}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x4, 0xc, 0x1, {0x9, 0x25, 0x1, 0x5, "6b8143a189"}}}, {{0x9, 0x5, 0x1, 0x3a6fc5e9c55ed026, 0x40, 0x18, 0x2, 0xaa, {0xb, 0x25, 0x1, 0x7, "e62ce8d2682d4d"}}}]}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x250, 0x1, 0xa, 0x2, 0x40, 0x1}, 0x4f, &(0x7f0000000940)={0x5, 0xf, 0x4f, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2ae572e4c40ce590, 0x3, 0x0, 0xff01}, @generic={0xc, 0x10, 0x389508361b7c09f5, "a5c5396fcbab7573ea"}, @ssp_cap={0xc, 0x10, 0xa, 0xb, 0x0, 0x4, 0xf000, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "46180ffe0625aace04ea22a79e8bff3b"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x3, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x0, 0x0, 0x3ff}]}, 0x1, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x2009}}]}) syz_usb_connect(0x0, 0x993, &(0x7f0000000ac0)={{0x12, 0x1, 0x200, 0x4, 0xb, 0xaa, 0x10, 0x5c6, 0x9201, 0x9ad6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x981, 0x4, 0x2, 0x1, 0x40, 0xbf, "", [{{0x9, 0x4, 0xdd, 0x4, 0xe, 0x71, 0x5e, 0x58, 0x6, [@generic={0x6a, 0x21, "954b260f2f5c96d3f01342100329eee684795cf3567fe78284fe87eed7126586da9b5b04cbfb069d9789bf30c1c81e412352ad74f0726cb20a4ddda60c14bac4f5ce55ca1ad176997fe20d860b6f4abab4067ee9ef7e6fc7bc8cc63c1c0dcdc27771ccf28828dab0"}], [{{0x9, 0x5, 0x9, 0x10, 0x40, 0x9, 0x81, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x4d3}]}}, {{0x9, 0x5, 0xb, 0xc, 0x20, 0x5, 0x8, 0x26}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x3, 0x81, 0x0, [@generic={0xdc, 0x22, "bc41b754c68daa624ce679abf07c55325f511b1c6e211064b13113ecad16b439a98733339883a44a4a9d0d67410c46041ac38f4d414ea241e30c05f6e6f52269d8a3637ba62e6b50d7403aa11cdafa0dc34258c31be470bdcc228e3f4508619c120e390c1f755f20e9c1114b11c82a550f67f165ca8ab247be0410f297a5ab69034fdabb36ccc4d8c140ccd1f298ed1f6f1e454adb8828734e72e36e856485d9ef5d12b8a1b55796a43e486cf70302e89c5bdc54a1c95060acc93414ab5a62ad0eed3fcc29371249e8acc4e28c7cbcbbf33ff47aa66604eb4d24"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x3ff}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x9, 0x0, 0x9}}, {{0x9, 0x5, 0xb, 0x9ec53b22c0d055d3, 0x200, 0x8, 0x81, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7f, 0x8}]}}, {{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x8, 0x1, 0xe5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x10, 0x1000}, @generic={0x44, 0x21, "695277f58eb87137c01bf867717e272f688b3eb1cd9b539e731d4497cdf93585a82e4e0713f9c94bc6fce7d4e0f1178f27cd041ecc5c7a4c65fa09633d6e9c82caaa"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x4, 0x7, 0xf9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x3, 0x8e, 0x4, [@generic={0x8a, 0x1, "6841a6fe4aeefbd39db251577042bd54649f73c6ae6e44361b26686806f22ba73e33a682c8b7ea86aece0d018017d3c226f8b33c16902bee2d077fccd41a61d8df2073097964fdaaf45e81641952a3024ce96bd33adf483cf35434360cd7ba0be5fcd4bd8ea181f977f58b1c8f61e5b3a05b788dd0d4718989901b0321ff08957c39d8927a76124d"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf9, 0xfffa}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x9, 0x3, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xffff}]}}, {{0x9, 0x5, 0xf, 0x3, 0x40, 0x25, 0x40, 0x9, [@generic={0x94, 0x31, "91e4f9859cc1409fe65a29cef8dab80070ab844c3d83ce55f07161e246c58582f267c6ee52b16f13ceed74c9ee70335e9a56364bc13e973c6cf466ae87208a91fac0f3d619a75d809891ab2a81ca6f1088f507ad995c8ab8fa69e8e8cc3eff2d89d20d3b08919fd31b7402e2e99506448c0bfdbeb6856a787e67a06f93b89cc3c86b04797e969e3706bf9375571c380d816c"}]}}, {{0x9, 0x5, 0x4, 0x5, 0x200, 0xf0, 0x0, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x6}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x8, 0xfd, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3170d74f2f8e076f, 0x2, 0xb}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x8e, 0x2, 0x7, [@generic={0x8c, 0x5, "8b1a7f2ecb0f47b3e0247595f4c18ce062c214740b88ed224decad4741cee8bf600348b9fd9357d7ba717830182357f2b57856849768f31663edf1693bbfd69c61ee95d06eb33081f43b13ff13b5b610fc432c6936aa46c3460b6f25e23963f0908763cec6bdc3f783b6a8e13484011829be4f1527c827cce30614354126e1fae3916ce28488cadf45f3"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x9}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x5, 0xbf, 0x4, [@generic={0xd1, 0x30, "e5a46875e3ae27ee0abe49598054277b3ccc8fc2f224581a28af0a9e254522bd2a6e4452a45199156ac09cf517072f4cfbb363eaf104da6e7d5f279d19f5cf5f38f2b96fdf3d23b2f040b9b793a597e8a71bf19770901c9312472fbe79333697b9e3ea30ef6922f0ecb3d4e6ac814eca50bbbd86e8142624af32750d3fc94fedb381a9366e20313a9ec69928c91cb433a9bbf0c151bb96e68a57100d998babc334edb7132561954980b0378b9ab824285234ab652ccbb77eda153dd98bb06c4da41815921e584f74808eac64351b33"}]}}]}}, {{0x9, 0x4, 0x4b, 0x9, 0x1, 0xff, 0x85, 0x32, 0x0, [], [{{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x8, 0xa7, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x3}, @generic={0x69, 0x3, "2c3d4eb2a16da05d81603fe89cd358059c445f4e47592aab169dd207b6205420c6e29b1e61052c74798b53716f846bf01a2763fd5bf385130874416fa08ecd8d2aa47913abef730703f9120da7e9c98c1c77952eaf0e5088c240dbe5160c3716b24074b8df6ce2"}]}}]}}, {{0x9, 0x4, 0xe9, 0x9, 0x2, 0xf9, 0xa, 0x3b, 0x5, [], [{{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x1, 0x8, 0x1, [@generic={0xed, 0xa, "58c07aaf215828ae44f38824aabd8c3824aee7a4d170930294258dcf0038d8a895b14521e57dbd3c6c85d4d0a5f918f7a07a990924fac9f3966f8290848a19c86f8715989d6f87b91d41585cc8460c3ec13b5945263354ec3397d438e2c5cd9bf7907b405f397af6510e8a05ae05adc878e2bdc697c7e6c3222721e01f83f2282760a5322194f32b2930749a863718437ae4c2777b86990fff379f9a6bf6c909892e01af4fb836402b7b5932784091e06beb97525444f74370d8cb681d6a39cc8758208e4974788b7e40d0af575e18efae0862980f84508abb04d98923a009d7d94dc70c9e2418ae8c784d"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xb, 0x5}]}}, {{0x9, 0x5, 0xf, 0x4, 0x0, 0x80, 0x1, 0x75, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x6}]}}]}}, {{0x9, 0x4, 0x9e, 0xfa, 0x9, 0x6f, 0x5b, 0x79, 0xfc, [], [{{0x9, 0x5, 0xd, 0xc, 0x400, 0x5, 0x5, 0xe8, [@generic={0xd6, 0x21, "98d9795f82975adeb918fe4e5313f703a727a7fcc9e5784e0d15a95dff853cb211fe94164e54cc87b9e5c415db8b34c2f74983eb15a725fb238842cb51701ab29057b49bd0e82e563f53afb696a1492a620113e559f5c2082ca172da49b97991a8ba2b6f29f6f2862480bf8b6cd5bdc7bb2dc740bd61a17914cfdd8f170981092e8c800f19b864a5176c56223a8f4f1582622cbf3691091532d6ef76a90cde1b82bfee8d1b93b37ec625dbda94da75e7e5001a11c6980a988490d0cde17e38e50754bb710e1ea01bf5991265f5e4f320d70aa448"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x86, 0x8}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x6, 0x2, 0xff}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x4, 0x80, 0xd1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x10, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x200}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x5, 0x9, 0x35, [@generic={0x7, 0xd, "54459270b9"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0xf, 0x7, 0x6, [@generic={0x86, 0x24, "78164e21c584124ff78ba05173a44f0bf18e3059599fb164dc0eefc74a41ad2f22efea9ebf876e5640e2608af6ef9ff043f7fe14426e3d21a85a3b109516c5608024409627930fb75380926f2bd6f9729c8896eecafa25d2b1e7927e67b31bdbb0dcfb7f7672f20c92f1efb0684b77a1cfa13617c5e8f6e835962cab4de597d4910e79c3"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x440, 0x5, 0x90, 0x5}}, {{0x9, 0x5, 0xa, 0x4, 0x3ff, 0x8, 0x9, 0x4, [@generic={0xbe, 0xa, "0bcaef4639bee17dce04992cfdc50178409da1c646d378979b6e617d2be0b2bf307207e8a1864d7855e51094e83001b21d38ae20dfb9f691c75405a293d75bbb5ab297bdd2d0f8f4ebb38779db687b467ab2de8037d4e6ae77af2b5d19b5c6cf6f367dde09fbb52565f4557789a649c4b4131fd10ce43886972d1cac2bd8ab702d26e40942f1a7b03ea29285bdba160136607f2726a46e768d275136aa171dfdc50207afcda1c42fddb665b60f465ecadadef0ec0cb37469e7ea7d99"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3f, 0x2}]}}, {{0x9, 0x5, 0x7, 0x3, 0x8, 0x2, 0x3, 0xd}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0xf4, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6}, @generic={0x69, 0x10, "b87e9c259bf95304d73bdc0f649397c103c3fbe4d0dde53f908d916ccf6567dd3684a42c6589767ece3270231cd57f68ef3c9dff02bc7daed706dd50428a532f182a10c741aa84d1f2a4e571148a8ffa194fd64de19cb5ea4230df305dc8586aa96d6bc6aa6bce"}]}}]}}]}}]}}, &(0x7f0000001680)={0xa, &(0x7f0000001480)={0xa, 0x6, 0x300, 0x7, 0x9, 0xc, 0x10, 0x5}, 0x100, &(0x7f00000014c0)={0x5, 0xf, 0x100, 0x5, [@wireless={0xb, 0x10, 0x1, 0x0, 0x84, 0x1, 0x7a, 0x3, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x6, 0x6}, @generic={0xdb, 0x10, 0x1, "75902aea60db2b272efa05f29ed3c254fe9d651f1b4802c171ff32a1f741b6b8f1c919321afb72d3e559b0670cb27aee62bf3b8cf6420e9706f1d43370e69c3c12f1c775a5189823001aba01b04179bb64aa02c38c061309078e6c382d6019c7489d1d3f9b31bf5857c94427d5c8b9ea2172b8ebb9eaac26fe5b977bb700a0cd27f22ad2667dd61e3d7b3e569cc85d88068624eb6467f01f32db45b18239408cfdb94fd5c4f1ff279ce6e7a0e9eaa2f4504f0dd8366e5e120d41dc84fefb8dc8c3b8c5b45ea0049cd04ab6bf2f406a2305f9643e56b70276"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x5, 0x0, 0x81}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xb, 0x2, 0xfd}]}, 0x3, [{0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x809}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x71, &(0x7f0000000a40)=@generic={0x5, 0x0, 0x69, "6aefb2b3", "110cd520de6a010e89ef9f129d15a287dd1e06fad9609b7831e772fe0042a1df38a1e57b071a9ee29b7ed444898b620cbadc83b74f5abbe49c572f351e2bf6830c2d189581493036b58fa52673db3efae4f7fa940535fbb42116178d608158ece3a200f39eced82c8a"}) r2 = socket$tipc(0x1e, 0x5, 0x0) listen(r2, 0x3) ioctl$int_in(r2, 0x5421, &(0x7f0000000280)=0x521f) accept4(r2, 0x0, 0x0, 0x400000000000000) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x20, 0x0, 0x2e, {0x2e, 0xd, "0b4f93939822c96a5523e134d85a52a79651b2a3c85ec3b2dfc2fe577dd29c260114d42f86a0a297199dcd00"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, &(0x7f0000000100)={0x0, 0xf, 0x88, {0x5, 0xf, 0x88, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0xb, 0x2, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x4, 0x7fff}, @generic={0x4d, 0x10, 0x1, "6392468082d8f7f350bebffcfb55c338da77a7660442145b969ade430e93f41554f5e79a759b5c61f8dc717a57e6b5f3ec429df16e2f8613d95c0f09b7e611f16b82cc61c7f1f76c1914"}, @ss_container_id={0x14, 0x10, 0x4, 0x35, "aba792b9f93d86c0e04b1c1d827fe661"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "ef8dac1c94805a3a21bab6c651ad6613"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf5, 0x0, 0xf7, 0x2, "7ae65155", "e2e7cf14"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x10, 0xda, 0x3, 0xff, 0x3, 0x3}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x15, 0xb4, "213c473e0956a7a894460f414e51964789c75fa85bcd3a7f7b420ee9dc9e08ff98d88904f368c78ff47ca7ee6c21a581b7c6d4fe8ab01c4de35ca038585fb1f23fbe08d7e0cb6a3ac1c7fb7111ff4069d12ff997ac475c29bc6efa46e3a77bd410605178e3deb61e6934ee02feaceff4058cc9fb154fb3062c5b8987ff3cb0e71ccf6d58406a901bb0ddf7ef94159f1b81d5c2f2ddff450428828907611be2a01c36e4502a057ea92ee3ed63ebc07698fe4a96e0"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xba}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x20, 0x2b0139faead849ae, [0x0]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000540)={0x40, 0xb, 0x2, "c987"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x9}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x19, 0x2, "f969"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x6}, &(0x7f00000006c0)={0x40, 0x1c, 0x1}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0xd}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x1}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xf9}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xfffffffc, 0x401, 0x5, 0xe, 0xfffffffc}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x6c}}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000840)={0x41, 0x3, 0x1}, 0x10) 5.500243904s ago: executing program 4 (id=1824): r0 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 5.49989874s ago: executing program 5 (id=1825): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xfb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xea, 0x10, 0x86, "", [{{0x9, 0x4, 0x0, 0x79, 0x2, 0x3, 0x1, 0x0, 0xb0, {0x9, 0x21, 0x100, 0x0, 0x1, {0x22, 0x512}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x0, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1, 0x4, 0x18}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x4, 0x0, 0x2, 0x40, 0xe6}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x2, [{0x99, &(0x7f0000000280)=@string={0x99, 0x3, "2e68fc68787e21d426f04b41bfcd237344acefc4af3578d58ac800b2fa203c915587a83238e05a913001b87f647c0f510821a0ca93a7ba0bd1a63a4f0755d430480572e1c8aa9fcabdf979eac6c384f94b0e3f5de108216316a635a3e28ed8e75ce35d8d5093afc24360f3c0c95354496600193ffcd665e11fb822beef724dc4b229d293f0374f9ee122357a4a672dc1ff4be31bde5cca"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x810}}]}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000b00", @ANYRES16=r1, @ANYBLOB="01000000000000000000030000000800020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x3) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) close_range(r0, 0xffffffffffffffff, 0x0) 5.451948838s ago: executing program 0 (id=1826): mlockall(0x3) 5.368475604s ago: executing program 4 (id=1827): unshare(0x8000400) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xa8402, 0x0) read$rfkill(r1, &(0x7f0000000040), 0x8) 5.23227149s ago: executing program 4 (id=1828): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)="000000000100000000000000000000d3b92f4ad54386287ca0eed7d34b18a0ca939b97330b58b318645cb6749ade60034abc44a9af32823477f6a9cb4c45e80407a362d473c30a", 0x47}, {&(0x7f0000000000)="4673c875ca", 0x5}, {&(0x7f0000000080)="fc8c1ac5ab1defa59a0319c982d76e3dbebf98ce2a440c85066e30", 0x1b}], 0x3) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 5.049431696s ago: executing program 4 (id=1829): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x40, 0x0, 0x2, 0x8ffc}, {0x30, 0xfd, 0x3, 0x12000000}, {0x6, 0x3e, 0x0, 0x8005}]}, 0x10) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[], 0x33fe0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r7 = syz_ublk_setup_io_uring(0x60c, &(0x7f0000000340)={0x0, 0x62cb, 0x2, 0x1, 0x336}, &(0x7f00000003c0), 0x0, &(0x7f0000000440)) io_uring_enter(r7, 0x590c, 0x551a, 0x10, &(0x7f0000000580)={[0x9]}, 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8fcffffff00000000ac14141d000000000000000000000000fc02000000000000000000000000000000000000000000000a000000000000000de573ecb6ef55095bd4e72f419266266e37045507a5e746890888f3e99d06ec8aa5c025c1302803a7263a258d18d1d12be2e8ad3bbcf803cc3d230b63716265216ac904e5d7ad5e5ac7bbd9824e1e54f3811c1bc8744ac814bc916abfd1858fb350c6f9f6e0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000000000000000000090000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000040000000000000000000000000000000000000000004000"/112], 0xb8}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000fdfffffffffffffffbffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c2fcbb11aa258e2769a6466ce2af58e358c0b0d3be37be06b738449aed2a3fe526f7d994265ea987fdfefba2dcb025982fdc903aa8d96509e3a780490f2f94e8d6f0af4f7bd75a61d00000000"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) sync() mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x200000, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000008800), 0x2000, &(0x7f0000000100)={&(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x231687f, 0x1000, 0xc, 0x7ff, 0x58, 0x0, 0x0, 0x4, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x3, 0x3e, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 3.903330004s ago: executing program 2 (id=1830): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) (fail_nth: 1) 3.712019685s ago: executing program 2 (id=1832): sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, &(0x7f0000000040)={'virt_wifi0\x00', @remote}) ioctl(r0, 0x8b24, &(0x7f0000000040)) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a0000008e9b00000800000009"], 0x50) 3.607828549s ago: executing program 5 (id=1834): syz_clone(0x20006000, &(0x7f00000000c0)="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", 0x278, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e04004020"], 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x0, 0x17}, "636b2f7e15c383defc9144994225be1ae9853f26544c7e"}, 0x1b) 3.512343507s ago: executing program 0 (id=1836): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x8c) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000600)='./file7\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000640)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000740)='./file7\x00', 0xc1c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000880)='./file7\x00', 0x11c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000940)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000009c0)='./file7\x00', 0x61c0, 0x700) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000a80)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./file7\x00', 0x0) symlinkat(&(0x7f0000000b00)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./file7\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000c00)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000c40)='./file7\x00', 0x0) 3.260146872s ago: executing program 0 (id=1837): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xfb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xea, 0x10, 0x86, "", [{{0x9, 0x4, 0x0, 0x79, 0x2, 0x3, 0x1, 0x0, 0xb0, {0x9, 0x21, 0x100, 0x0, 0x1, {0x22, 0x512}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x0, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1, 0x4, 0x18}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x4, 0x0, 0x2, 0x40, 0xe6}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x2, [{0x99, &(0x7f0000000280)=@string={0x99, 0x3, "2e68fc68787e21d426f04b41bfcd237344acefc4af3578d58ac800b2fa203c915587a83238e05a913001b87f647c0f510821a0ca93a7ba0bd1a63a4f0755d430480572e1c8aa9fcabdf979eac6c384f94b0e3f5de108216316a635a3e28ed8e75ce35d8d5093afc24360f3c0c95354496600193ffcd665e11fb822beef724dc4b229d293f0374f9ee122357a4a672dc1ff4be31bde5cca"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x810}}]}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4023a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0xd0f, 0xffbffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0x0, 0x1a}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x200188d1) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) close_range(r0, 0xffffffffffffffff, 0x0) 2.510192797s ago: executing program 1 (id=1838): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c0002800500070001000000080002", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x48}}, 0x20000000) 2.447544558s ago: executing program 2 (id=1839): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0xfff1, 0xb7, 0xbf, 0x8}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fanotify_init(0x20, 0x1000) r3 = fcntl$dupfd(r1, 0x406, r1) fanotify_mark(r2, 0x1, 0x40000019, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='X', 0x1}], 0x1) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x400005}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000001ac0)=""/107, 0x6b}, {&(0x7f0000000000)=""/131, 0x83}, {&(0x7f0000000300)=""/4097, 0x1001}, {&(0x7f0000002e80)=""/249, 0xf9}], 0x4}, 0x81}, {{0x0, 0x0, 0x0}, 0x204}], 0x4, 0x40000130, 0x0) 2.381271367s ago: executing program 5 (id=1840): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x50007a2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105842, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES64=r0], 0x0) 2.380286925s ago: executing program 1 (id=1841): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x145042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x60) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x82000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x4, 0x12, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @alu={0x7, 0x0, 0xc, 0xa, 0x0, 0xffffffffffffffe0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000540)='syzkaller\x00', 0xb, 0x50, &(0x7f0000000580)=""/80, 0x41100, 0x64, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0xc, 0x0, 0x3}, 0x10, 0x0, r0, 0x1, &(0x7f0000000700)=[r0, r0, r0, r0, r0], &(0x7f0000000740)=[{0x0, 0x3, 0x1, 0xc}], 0x10, 0x5}, 0x94) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x58}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x40000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x7, 0x5}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x81}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lstat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r0, 0xc0207511, &(0x7f0000000340)={0x0, 0xffff, 0x0, 0x0, 0x0}) rt_tgsigqueueinfo(0x0, r5, 0x2a, &(0x7f00000003c0)={0x2a, 0x700, 0x3}) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0xc) fsync(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x46, 0x8000000000000003, 0x0, 0x3, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000480), 0x128043, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r7 = userfaultfd(0x801) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) 2.299911235s ago: executing program 2 (id=1842): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x404200, 0x0) recvmsg$inet_nvme(r0, &(0x7f0000000380)={&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/147, 0x93}, {&(0x7f0000000180)=""/17, 0x11}, {&(0x7f00000001c0)=""/98, 0x62}, {&(0x7f0000000240)=""/239, 0xef}], 0x4}, 0x40014120) syz_usb_connect$uac1(0x1, 0x9c, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x582, 0x7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x7, 0xb0, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4bba, 0x2d}, [@mixer_unit={0x5, 0x24, 0x4, 0x1, 0x1a}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x405, 0x1, 0xff, 0x3, 0x62, 0x2}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x1ff, 0x5, 0x10, 0x9, 0x64, 0xd}, @mixer_unit={0x6, 0x24, 0x4, 0x5, 0xd, "9f"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x10, 0x31, 0x6, {0x7, 0x25, 0x1, 0x8, 0x3, 0x34df}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x10, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0xfb, 0xfa, {0x7, 0x25, 0x1, 0xc, 0x9, 0x400}}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x200, 0x3, 0x5, 0xd, 0x20, 0x3}, 0x10, &(0x7f00000004c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x42, 0x95, 0x5, 0x7, 0x1}]}, 0x2, [{0xc0, &(0x7f0000000500)=@string={0xc0, 0x3, "02c6d19d41d27724f29b7386917831df951cad367257f0bc345d33a38f76a0aa3b2ef0660b5bfd8d3a5f051f767c5717398184f9e10a3d2388df5b8f3523ae9f32c26a32de07f5c527ba00ee501f364be08bd30097435f0ab084eef7d0daa6ef37604ac7034b2a71a04fc52e57442b1f19dffc889f05363508c0290adb70f6a6b441eeed47b0213382fca0689bd2f8744fef79c0f7c76731a2db77fca08a0f25133877cd3bc369834f04b4150d818cbd8deb0e808261aeac6eea6af1a6f1"}}, {0x33, &(0x7f00000005c0)=@string={0x33, 0x3, "e3f3a16d7835bb13aad0b2f50422e1f11ad1a754a269ad51a3790fc5fac3122295e3138107985aab32ce7c4db4a99ea066"}}]}) syz_usb_connect$midi(0x2, 0x89, &(0x7f0000000640)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xd7, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x1, 0x1, 0x7b, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x30, 0x3, [@midi_in_jack={0x6, 0x24, 0x2, 0x4, 0xc, 0x5}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x7}, @midi_out_jack={0x11, 0x24, 0x3, 0x1, 0xb, 0x5, [{0x7, 0x7}, {0xf2, 0x6}, {0x5b, 0xf}, {0x2, 0x37}, {0x1, 0x5c}], 0xe}, @ms_header={0x7, 0x24, 0x1, 0x4f04, 0x7}, @midi_out_jack={0xd, 0x24, 0x3, 0x2, 0x80, 0x3, [{0x1, 0x1}, {0x3}, {0x7, 0x2}], 0x8}, @midi_out_jack={0x9, 0x24, 0x3, 0x3, 0x20, 0x1, [{0x3, 0x4}], 0x2}], [{{0x9, 0x5, 0x7, 0x10, 0x200, 0xcd, 0xf, 0x70, {0xa, 0x25, 0x1, 0x6, "c2fd803d2da5"}}}, {{0x9, 0x5, 0xa, 0x10, 0x8bc313f59527bdbd, 0x6, 0x6, 0x5, {0xf, 0x25, 0x1, 0xb, "74e10668a254ffbefe8e9d"}}}]}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x10, 0xd, 0x0, 0x4, 0xff, 0x6}, 0x5, &(0x7f0000000740)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x2801}}, {0x35, &(0x7f00000007c0)=@string={0x35, 0x3, "fa192016fd0a498e80c761bf1c733f8a826f97ed7d295191fdf0a02730943aab28663d151bc25e567f6a4e66f176cbf49aa797"}}, {0xa0, &(0x7f0000000800)=@string={0xa0, 0x3, "e8edf6bec075eabd16552fc52d42c48f07495ccd8d1d2f30e4d366227af6cb5f89e07c544fd480119ea0d0fcfb56882ea623e6ff220dd2168cbbd733de4794872d65acec7e9ba9901d2f3466bf3d74be10a97c1c0774465796c4fac68fa2d61d2c0f3d8a5ffc7522260bf89c3a4a5b10110fa7ab54fc2804e4296331cf12d7b96d52b338799bb517196aaeedab6d7c646cfc44d9f4c054ab86039c4bb5d6"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x1475}}, {0x58, &(0x7f0000000900)=@string={0x58, 0x3, "85c18f93fe86a7d163e752e0b42b0a99c89ce7af948aed75c3919cd51d0853ab6b1556b1b16a3c9a7aaad87e4191b4c659cf529a30381fcbda74c75a56c42bfbc55b917dd66d63341c01d0a4c9ea1a1eee0cc723ca37"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x444}}, {0x6d, &(0x7f00000009c0)=@string={0x6d, 0x3, "8d92524baa5356a7b9fa49538765594d37ef2f63dc72ae61c7f692e6d194b7e13994ba78c17b6255d1b05538c9f697eed7f1ae2be4e6107a227b3d3f2c76828f9b06eb8a5a262cbf4b1918209fc0cf230d5cf45c00f9cff5b5f3c6204edcf16c2919e5eb57bb1a6a830018"}}]}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000ac0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0xa30, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x20, 0x8, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x2, 0x80, {0x9, 0x21, 0xd, 0x8, 0x1, {0x22, 0x797}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xd1, 0x69, 0x80}}}}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x110, 0x6, 0x1, 0x9, 0x48, 0x8}, 0x58, &(0x7f0000000b40)={0x5, 0xf, 0x58, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x2, 0xf0f, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x2, 0x0, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0xe, 0xfff}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x5, 0xf00, 0xfff8, [0x30, 0x3fc0, 0xc0]}, @ss_container_id={0x14, 0x10, 0x4, 0xfb, "a97cf2174ae79cc0ef22c0a486b35761"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x8e, 0x3, 0x7ff}]}, 0x4, [{0xad, &(0x7f0000000bc0)=@string={0xad, 0x3, "e5ac2dceb5d2e40a16f14a9d5769dd2816a2dcd1b7cd41232b7c33fa91a6ed12604365213d2e02038356e97d3447315ed4efabec14768a8169626ad0e62aca852c65911b44b679022b4320fdbb9dda02626b43aa67de2ea8a7fa254ca77c74191c52a4f74846118909636fb472482744c16e4169e5540b38e73328ed3aff3732b2e788a69936b0b633b50e82c96108198ad88835f14b658b946a7fec02d8a670b3cbbff67c3964cdc03e7c"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x140c}}, {0xdf, &(0x7f0000000cc0)=@string={0xdf, 0x3, "be3e51a48f9f66a2f62a35cebe2b6b90b8c565107eaf6b8060c8b2bb47f72c02436346a9eb0b079434d719430a33b5d910c28174a9c1b45562811811856b589af8ad54660c548aa14ccdf7a61111003dafabee3a40559f760f2e6ddb9bfd263e65b84cb2ee079baed697f2822d65343bfd09c6d9611b743ba12531011c76f113cd8501e5d4c094735db5c5c81bcefc8700cf903872f6f40fe772ced2b6322f3bf5b1df76e6516148fe64c5c87423401d8e476fa547f146f9880df83af4864475c311184bc858f6a42563e777aadd517e95151df68ac0b93984cb60e5d9"}}, {0x62, &(0x7f0000000dc0)=@string={0x62, 0x3, "0e9389fcc841d5fe99a3a4924690a0b445cbbb4bafb2b85e9b013b87c6748d02e4a65e2bf61450e12e79598d5a0daaf5a1e24d11012bf2a997d997511237a84fe5db11bbed4ea556a03372598d709b5505a5187065cef5a9ef56c5f944fc34f5"}}]}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) connect$inet6(r0, &(0x7f0000000ec0)={0xa, 0x4e23, 0x4, @mcast1, 0x8}, 0x1c) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000f40)={0x0, 0x1}) fsetxattr$security_evm(r2, &(0x7f0000000f80), &(0x7f0000000fc0)=@v2={0x3, 0x3, 0xc, 0x889, 0x46, "45e524b016292d6d35cc1ffba16c0414450ca22a133ebb3e711406a29a2bf08141b9c3a2a0d998340be9505d5c32b54678476702c8fc9f2802fa529263bf53dc00ff7888c670"}, 0x4f, 0x4) io_setup(0x9e, &(0x7f0000001040)=0x0) r4 = eventfd2(0x4, 0x800) io_submit(r3, 0x7, &(0x7f0000001780)=[&(0x7f0000001180)={0x0, 0x0, 0x0, 0x6, 0x0, r0, &(0x7f0000001080)="3ee166469228c9d08711385da49020803087c2eddb05f35eda1cf6682f2f296964a5f2fb2fbf85921b490c3fa975af4c4132a9caf5336d4896d6db66ec29469c4ecf0203a98aeb5a9e98c81e9086f57bccdb4ac21238b8752092eb4bf5754239b86344c05535ffc7bc2de5f0ba31ec0cd4c765197c16393be618827772f53a53bf8a47fee0aa3380e1316ed9a6916c65c87d3df133206506b5a03c9ba2a7baf9c7aa6acc92bf9031afec91d563963407cf66ed8b079224bd141439593ceb6dd34e4582cc792c3cc25d70fdddc8c26e615f4654ab9137ea7fbb80d2f68d83e72430590a", 0xe3, 0x6, 0x0, 0x2, r0}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0xfffd, r1, &(0x7f00000011c0)="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", 0xfa, 0x1, 0x0, 0x1, r0}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x6, 0x800, r1, &(0x7f0000001300)="bb2bffd38ac95f295fdf20df2c242d8d55ac13dd986699d61c1aa43404ebb3561101f6640d5c03390c054ac1b55ea20c206e5c5f0e94272e02d6ea4ece50f25fa09c4d249059d7677215924c41b8242d594a8e69b93acacb048f5d3818fb9af28e790e", 0x63, 0x3, 0x0, 0x3, r2}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x7, 0x2, r0, &(0x7f00000013c0)="0f2ce0163056c8b848b2a44989eac141dfa554bcaa006182e212497711e8699eb26f262764fd5141c778a582522d2d97be59354803b4e9c45846d082ecfe931131d6c8afbcafcd05624341b26a70dd9a724aa407a2e42eeda325eff4ba1efe50ea058dda099a4757405642334c00f5bc4fafde6c0aa446050dcb1cd4bbe09e65665d40acf06022d0682a3ddfaf092be0d57a4c097239e9975ee6c3e0e22c96d5ca393fac48daa6dd43c207537f7e2cda0696d4f8e620a498e5b96c55d5efae6defce2e8c7340814ed93a46d14241875f6528d41bd037bba5a476b5c671efd8a7498e2012", 0xe4, 0x1, 0x0, 0x0, r4}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x9, r2, &(0x7f0000001500)="aa0b7a5144bb78579759a98a9b5ae61c4ca549b5943081d2ad4cbc640e96ca95f94d524f7a39897851be6b5e7a175794c3b82eadda3d97e05b3d7bec7d10b78af2804af192843d4ebd9ff8640e92d26db5f30e8ce5ad544cfcc7774d165aefc44391895abe71ba2f905de1f123f38b2f8d91fcf318325ae51b97f070fd007fb59de46a03e8205fcedd13c546cfbe74e3601f081cff05a023197f529b5c679d6f26e2e56af7c2523ab115afc0f5903ca4cef3e5f76cf4a0eccc9544f3e8a50311291bce02163d9fabaeb85b26fd666f14b5123cb2b336d191", 0xd8, 0x0, 0x0, 0x4}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x5, 0xffffffffffffffff, &(0x7f0000001640), 0x0, 0x1, 0x0, 0x3, r0}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x6, 0x8001, r1, &(0x7f00000016c0)="4c3f43d310962da52557312af2bd9f9433a82624b657c26f4c355c686bbcf5c7b6d3967b485a3c860061e9824ed0d3b1130ab0b88c4630365e453f88357ff8a13369b8ed5810b381a835df341e518a4a89c3d900a701", 0x56, 0xa, 0x0, 0x3}]) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001980)={'sit0\x00', &(0x7f0000001880)={'syztnl2\x00', 0x0, 0x7800, 0x1, 0x2, 0xfffffff7, {{0x31, 0x4, 0x0, 0x6, 0xc4, 0x67, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x6b, 0x3, 0x2, [{@broadcast, 0x7}, {@multicast1, 0x8}, {@local, 0x200}]}, @ra={0x94, 0x4}, @rr={0x7, 0x2b, 0xcd, [@private=0xa010100, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @empty, @rand_addr=0x64010102, @loopback]}, @timestamp_addr={0x44, 0x24, 0xa4, 0x1, 0x1, [{@multicast2, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@private=0xa010101}, {@multicast1, 0x4}]}, @timestamp={0x44, 0x28, 0x23, 0x0, 0x4, [0x6, 0x5, 0x7, 0x2, 0x10, 0x10001, 0x80000001, 0x8, 0x0]}, @ssrr={0x89, 0xf, 0xaa, [@loopback, @empty, @rand_addr=0x64010102]}, @generic={0x94, 0x6, "ad0023eb"}, @noop]}}}}}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000019c0)={0x0, @local, @empty}, &(0x7f0000001a00)=0xc) sendmsg$inet(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000017c0)="09740cb95ab78875b4bdee043f199391f349fcc0eb4d8b53ad60f09cb3faaeb8e969ffd4860b6a6e69c8bf63390d08d5eb970a2f2847448f011caeeb9cce2f77859ffd1661336c68", 0x48}], 0x1, &(0x7f0000001a40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0xf8, 0x0, 0x7, {[@cipso={0x86, 0x15, 0x0, [{0x2, 0xc, "59bd050efb988b8e1cd2"}, {0x1, 0x3, "05"}]}, @ssrr={0x89, 0x7, 0x27, [@local]}, @ra={0x94, 0x4, 0x1}, @end, @cipso={0x86, 0x75, 0xfffffffffffffffc, [{0x6, 0xb, "d1d7c753a080e97705"}, {0x1, 0x12, "2e198bf51d53888cd9344b478b0a5f4a"}, {0x5, 0x10, "4117dfd1a604be7a96a39ef75048"}, {0x1, 0x10, "c8f81104c90fe2001f6706851909"}, {0x0, 0x12, "ad8a412049a6d007f122d6da561c3b46"}, {0x2, 0x9, "922d8a0904bb7b"}, {0x7, 0x9, "4a5d9a355678c3"}, {0x1, 0x2}, {0x1, 0xc, "a4606e1dd06a87d3111a"}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x3c, 0x43, 0x3, 0x7, [{@loopback, 0x7f0}, {@remote, 0x6}, {@private=0xa010101, 0x2}, {@multicast1, 0xc25d}, {@loopback, 0x400}, {@broadcast, 0x9}, {@broadcast, 0x6}]}, @rr={0x7, 0xf, 0xaa, [@multicast2, @broadcast, @private=0xa010101]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x198}, 0x10) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000001c80), 0x6202, 0x0) splice(r0, &(0x7f0000001c40), r7, &(0x7f0000001cc0)=0x5, 0x9, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000001d00)=0x80000000) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001d40)={'vlan1\x00'}) r9 = syz_open_dev$dvb_demux(&(0x7f0000001d80), 0x6, 0x1110c0) ioctl$DVB_DEMUX_DMX_REQBUFS(r9, 0xc0086f3c, &(0x7f0000001dc0)={0x9, 0x8}) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001e00), 0x400000, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r10, 0x40043311, &(0x7f0000001e40)) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000001e80)={0xb, 0x9}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001ec0)={'vcan0\x00'}) ioctl$TCFLSH(r0, 0x540b, 0x2) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000001f00)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000001f40)) 1.88961282s ago: executing program 4 (id=1843): r0 = syz_io_uring_setup(0x3d1a, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x1}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000000)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000040)=[0x80, 0x3], 0x2) 1.801706169s ago: executing program 0 (id=1844): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x6, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r1, 0x0, 0x0}, 0x10) 1.672160291s ago: executing program 0 (id=1845): socket$packet(0x11, 0x2, 0x300) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x4000080) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000740)={@remote, 0x7f, 0x1, 0xff, 0x7, 0x401}, &(0x7f0000000780)=0x20) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.56231814s ago: executing program 0 (id=1846): connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x2}}}]}, 0x38}}, 0xc840) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0x400, 0x70bd2b, 0x24dfdbfb, {0x0, 0x0, 0x0, r4, {0x6, 0xf}, {}, {0x7, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0xf3d}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x2}]}}]}, 0x44}}, 0x24040084) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_getneigh={0x28, 0x1e, 0x320, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, r4, 0x0, 0x100}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x20, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8, 0x8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3f7, 0x0, 0x2b, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000080)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="4023280000009b55cc4b2d1dfd162c000000000000ed4fdca0"], 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$key(0xf, 0x3, 0x2) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$key(r7, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.483621187s ago: executing program 1 (id=1847): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=0x2001, 0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0) 1.219240199s ago: executing program 1 (id=1848): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x300) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000600)='./file7\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000640)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000740)='./file7\x00', 0xc1c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000880)='./file7\x00', 0x11c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000940)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000009c0)='./file7\x00', 0x61c0, 0x700) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000a80)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./file7\x00', 0x0) symlinkat(&(0x7f0000000b00)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./file7\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000c00)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000c40)='./file7\x00', 0x0) 1.128300609s ago: executing program 1 (id=1849): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_ethernet(0x60a, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x5fc, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @broadcast}, "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"}}}}, 0x0) 1.069970622s ago: executing program 1 (id=1850): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8942, &(0x7f0000000900)={'veth1_virt_wifi\x00', @random='\x00\x00\x00 \x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='affs\x00', 0x21c051, 0x0) 657.352737ms ago: executing program 5 (id=1851): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c0002800500070001000000080002", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x48}}, 0x20000000) 471.205727ms ago: executing program 5 (id=1852): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x38}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x99, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r1, 0xc0045401, &(0x7f00000001c0)=0x319) prctl$PR_SET_FPEXC(0xc, 0x3) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r2, &(0x7f0000000600)='\r', 0x1, 0x5, 0x0, 0x0) recvfrom(r2, &(0x7f0000001a80)=""/4058, 0xfda, 0xc0020445, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4000810) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x241, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x363, 0x2, 0x2, 0xc, 0xe, 0x7, 0x79, 0x3, 0x80008, 0x2, 0x20, 0x1, 0x7, 0xfffffffd, 0x100, 0x100, 0xfffffffb, 0x8007, 0xbe, 0x7fffffff, 0x89, 0xca9b, 0x0, 0x20001e58, 0x1, 0x74, 0x3, 0x8, 0x2, 0x0, 0xfffffff8]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000580)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000005c0)=0x28) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002980)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0xf}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240000c5}, 0x4800) 368.778375ms ago: executing program 4 (id=1853): r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_io_uring_setup(0x6d6a, &(0x7f00000000c0)={0x0, 0x440, 0x400, 0x1, 0xce}, &(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) syz_ublk_setup_io_uring(0x27d9, &(0x7f0000000200)={0x0, 0xfa07, 0x2000, 0x3, 0x1ce}, &(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000300)) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x44, 0x4, 0x2, 0x0, 0x1}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r5}, 0x20) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r4, &(0x7f0000000140), &(0x7f0000000340)=@udp6=r6, 0x1}, 0x20) syz_io_uring_submit(r1, r2, 0x0, &(0x7f0000000480)=@IORING_OP_FALLOCATE={0x11, 0xd4bdb2fb450d4bfd, 0x0, @fd=r3, 0xfffffffffffffff9, 0x0, 0x3}) syz_usb_connect(0x5, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e010000182402010202"], 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r7, 0x2000, 0x0) 0s ago: executing program 5 (id=1854): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xfb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xea, 0x10, 0x86, "", [{{0x9, 0x4, 0x0, 0x79, 0x2, 0x3, 0x1, 0x0, 0xb0, {0x9, 0x21, 0x100, 0x0, 0x1, {0x22, 0x512}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x0, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1, 0x4, 0x18}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x4, 0x0, 0x2, 0x40, 0xe6}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x2, [{0x99, &(0x7f0000000280)=@string={0x99, 0x3, "2e68fc68787e21d426f04b41bfcd237344acefc4af3578d58ac800b2fa203c915587a83238e05a913001b87f647c0f510821a0ca93a7ba0bd1a63a4f0755d430480572e1c8aa9fcabdf979eac6c384f94b0e3f5de108216316a635a3e28ed8e75ce35d8d5093afc24360f3c0c95354496600193ffcd665e11fb822beef724dc4b229d293f0374f9ee122357a4a672dc1ff4be31bde5cca"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x810}}]}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4023a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0xd0f, 0xffbffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0x0, 0x1a}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x200188d1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 002528][ T5594] usb 3-1: Manufacturer: syz [ 429.002545][ T5594] usb 3-1: SerialNumber: syz [ 429.051523][ T5594] usb 3-1: config 0 descriptor?? [ 429.259805][ T5594] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22 [ 429.265009][ T5594] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 429.273887][ T5594] usb 3-1: USB disconnect, device number 55 [ 429.288460][ T5708] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 429.439954][ T5708] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 429.439987][ T5708] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 429.441854][ T5708] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 429.441885][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.441906][ T5708] usb 2-1: Product: syz [ 429.441920][ T5708] usb 2-1: Manufacturer: syz [ 429.441935][ T5708] usb 2-1: SerialNumber: syz [ 429.446046][ T5708] usb 2-1: config 0 descriptor?? [ 429.452759][ T5708] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 429.598689][ T5822] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 429.908142][ T5822] usb 6-1: Using ep0 maxpacket: 32 [ 429.909938][ T5822] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 429.909968][ T5822] usb 6-1: config 0 has no interface number 0 [ 429.911834][ T5822] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 429.912015][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.912038][ T5822] usb 6-1: Product: syz [ 429.912052][ T5822] usb 6-1: Manufacturer: syz [ 429.912066][ T5822] usb 6-1: SerialNumber: syz [ 429.915131][ T5822] usb 6-1: config 0 descriptor?? [ 430.888698][ T5822] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 430.888730][ T5822] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 431.044077][T10890] FAULT_INJECTION: forcing a failure. [ 431.044077][T10890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.044126][T10890] CPU: 0 UID: 0 PID: 10890 Comm: syz.2.1537 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 431.044157][T10890] Tainted: [L]=SOFTLOCKUP [ 431.044169][T10890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 431.044182][T10890] Call Trace: [ 431.044190][T10890] [ 431.044199][T10890] dump_stack_lvl+0xe8/0x150 [ 431.044227][T10890] should_fail_ex+0x467/0x600 [ 431.044253][T10890] _copy_from_user+0x2d/0xb0 [ 431.044273][T10890] ___sys_recvmsg+0x173/0x590 [ 431.044302][T10890] ? __pfx____sys_recvmsg+0x10/0x10 [ 431.044332][T10890] ? __fget_files+0x2a/0x420 [ 431.044358][T10890] ? rcu_is_watching+0x15/0xb0 [ 431.044392][T10890] ? __fget_files+0x3a8/0x420 [ 431.044427][T10890] do_recvmmsg+0x32f/0x810 [ 431.044459][T10890] ? rcu_is_watching+0x15/0xb0 [ 431.044484][T10890] ? __pfx_do_recvmmsg+0x10/0x10 [ 431.044512][T10890] ? rcu_is_watching+0x15/0xb0 [ 431.044542][T10890] ? trace_irq_enable+0x3b/0x140 [ 431.044567][T10890] ? lock_release+0x4b/0x3c0 [ 431.044587][T10890] ? fdget_pos+0x252/0x320 [ 431.044616][T10890] __x64_sys_recvmmsg+0x198/0x250 [ 431.044636][T10890] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 431.044654][T10890] ? rcu_is_watching+0x15/0xb0 [ 431.044669][T10890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.044682][T10890] do_syscall_64+0x174/0x580 [ 431.044698][T10890] ? trace_irq_disable+0x3b/0x140 [ 431.044710][T10890] ? clear_bhb_loop+0x40/0x90 [ 431.044723][T10890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.044734][T10890] RIP: 0033:0x7f307ed1ce59 [ 431.044747][T10890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.044758][T10890] RSP: 002b:00007f307cf6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 431.044773][T10890] RAX: ffffffffffffffda RBX: 00007f307ef95fa0 RCX: 00007f307ed1ce59 [ 431.044783][T10890] RDX: 0000000000000001 RSI: 0000200000003700 RDI: 0000000000000003 [ 431.044791][T10890] RBP: 00007f307cf6e090 R08: 0000000000000000 R09: 0000000000000000 [ 431.044799][T10890] R10: 0000000000000140 R11: 0000000000000246 R12: 0000000000000001 [ 431.044807][T10890] R13: 00007f307ef96038 R14: 00007f307ef95fa0 R15: 00007ffc9845dbf8 [ 431.044820][T10890] [ 431.091476][ T5822] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 431.091671][ T5822] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 431.168209][ T5708] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 431.319177][ T5708] usb 5-1: not running at top speed; connect to a high speed hub [ 431.324000][ T5708] usb 5-1: config 1 interface 0 has no altsetting 0 [ 431.329081][ T5708] usb 5-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.40 [ 431.329111][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.329130][ T5708] usb 5-1: Product: syz [ 431.329143][ T5708] usb 5-1: Manufacturer: ࠐ [ 431.329157][ T5708] usb 5-1: SerialNumber: syz [ 431.551788][T10888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.554209][T10888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.620354][ T4923] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 431.804303][ T5708] usbhid 5-1:1.0: can't add hid device: -71 [ 431.804362][ T5708] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 431.812735][ T5708] usb 5-1: USB disconnect, device number 44 [ 432.338181][ T5708] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 432.476444][T10916] /dev/nbd0: Can't lookup blockdev [ 432.488261][ T5708] usb 3-1: Using ep0 maxpacket: 16 [ 432.491399][ T5708] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 432.491425][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.491444][ T5708] usb 3-1: Product: syz [ 432.491458][ T5708] usb 3-1: Manufacturer: syz [ 432.491472][ T5708] usb 3-1: SerialNumber: syz [ 432.493917][ T5708] usb 3-1: config 0 descriptor?? [ 432.497912][ T5708] gspca_main: spca508-2.14.0 probing 041e:4018 [ 432.702058][ T5708] gspca_spca508: reg_read err -32 [ 432.702478][ T5708] gspca_spca508: reg_read err -32 [ 432.703155][ T5708] gspca_spca508: reg_read err -32 [ 432.934427][ T5708] gspca_spca508: reg_read err -71 [ 432.934858][ T5708] gspca_spca508: reg write: error -71 [ 432.934930][ T5708] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 432.944376][ T5708] usb 3-1: USB disconnect, device number 56 [ 433.112337][ T5708] usb 2-1: USB disconnect, device number 52 [ 433.270984][ T5594] usb 6-1: USB disconnect, device number 35 [ 433.488459][ T5708] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 433.658141][ T5708] usb 2-1: Using ep0 maxpacket: 16 [ 433.660888][ T5708] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 433.662696][ T5708] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 433.662715][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.662727][ T5708] usb 2-1: Product: syz [ 433.662736][ T5708] usb 2-1: Manufacturer: syz [ 433.662744][ T5708] usb 2-1: SerialNumber: syz [ 433.664874][ T5708] usb 2-1: config 0 descriptor?? [ 434.323846][T10935] program syz.4.1552 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 434.332345][ T5708] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 434.348272][ T5708] usb 2-1: Detected FT232B [ 434.506784][ T5708] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 434.507108][ T5708] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 434.523628][ T5708] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 434.537145][ T5708] usb 2-1: USB disconnect, device number 53 [ 434.548607][ T5708] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 434.549025][ T5708] ftdi_sio 2-1:0.0: device disconnected [ 434.814061][T10950] FAULT_INJECTION: forcing a failure. [ 434.814061][T10950] name failslab, interval 1, probability 0, space 0, times 0 [ 434.814087][T10950] CPU: 1 UID: 0 PID: 10950 Comm: syz.4.1555 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 434.814106][T10950] Tainted: [L]=SOFTLOCKUP [ 434.814111][T10950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 434.814119][T10950] Call Trace: [ 434.814134][T10950] [ 434.814140][T10950] dump_stack_lvl+0xe8/0x150 [ 434.814158][T10950] should_fail_ex+0x467/0x600 [ 434.814176][T10950] should_failslab+0xa8/0x100 [ 434.814190][T10950] __kmalloc_noprof+0xdf/0x7a0 [ 434.814202][T10950] ? kfree+0x4d/0x6c0 [ 434.814212][T10950] ? get_pid_task+0x20/0x1f0 [ 434.814223][T10950] ? tomoyo_realpath_from_path+0xef/0x640 [ 434.814240][T10950] tomoyo_realpath_from_path+0xef/0x640 [ 434.814252][T10950] ? lock_release+0x4b/0x3c0 [ 434.814267][T10950] ? tomoyo_path_number_perm+0x219/0x5f0 [ 434.814284][T10950] tomoyo_path_number_perm+0x246/0x5f0 [ 434.814301][T10950] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 434.814314][T10950] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 434.814331][T10950] ? do_raw_spin_lock+0x12b/0x2f0 [ 434.814343][T10950] ? rcu_is_watching+0x15/0xb0 [ 434.814359][T10950] ? rcu_is_watching+0x15/0xb0 [ 434.814374][T10950] ? trace_irq_enable+0x3b/0x140 [ 434.814386][T10950] ? hook_file_ioctl+0x1f3/0x5d0 [ 434.814404][T10950] ? lock_release+0x4b/0x3c0 [ 434.814418][T10950] ? __fget_files+0x2a/0x420 [ 434.814434][T10950] ? __fget_files+0x3a8/0x420 [ 434.814449][T10950] ? __fget_files+0x2a/0x420 [ 434.814466][T10950] security_file_ioctl+0xc3/0x2a0 [ 434.814485][T10950] __se_sys_ioctl+0x47/0x170 [ 434.814498][T10950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.814511][T10950] do_syscall_64+0x174/0x580 [ 434.814527][T10950] ? trace_irq_disable+0x3b/0x140 [ 434.814539][T10950] ? clear_bhb_loop+0x40/0x90 [ 434.814552][T10950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.814563][T10950] RIP: 0033:0x7ffa4441ce59 [ 434.814575][T10950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.814586][T10950] RSP: 002b:00007ffa42655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 434.814601][T10950] RAX: ffffffffffffffda RBX: 00007ffa44696090 RCX: 00007ffa4441ce59 [ 434.814611][T10950] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 434.814619][T10950] RBP: 00007ffa42655090 R08: 0000000000000000 R09: 0000000000000000 [ 434.814629][T10950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.814640][T10950] R13: 00007ffa44696128 R14: 00007ffa44696090 R15: 00007ffeb29cefb8 [ 434.814663][T10950] [ 434.814672][T10950] ERROR: Out of memory at tomoyo_realpath_from_path. [ 435.924728][T10966] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1562'. [ 436.252029][T10980] batadv0: entered promiscuous mode [ 437.088125][ T5594] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 437.214665][T10993] XFS (nbd4): SB validate failed with error -5. [ 437.324251][ T5594] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.324281][ T5594] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 437.488360][ T5594] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 437.488380][ T5594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 437.488406][ T5594] usb 2-1: SerialNumber: syz [ 437.548142][ T5735] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 437.698100][ T5735] usb 6-1: Using ep0 maxpacket: 32 [ 437.701695][ T5735] usb 6-1: unable to get BOS descriptor or descriptor too short [ 437.703113][ T5735] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 437.703139][ T5735] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.703160][ T5735] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 437.705880][ T5735] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 437.705910][ T5735] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.705932][ T5735] usb 6-1: Product: syz [ 437.706067][ T5735] usb 6-1: Manufacturer: syz [ 437.706084][ T5735] usb 6-1: SerialNumber: syz [ 437.785427][ T5594] usb 2-1: 0:2 : does not exist [ 438.450511][ T5708] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 438.498316][T11009] fuse: Unknown parameter 'grou00000000000000000000' [ 438.503919][ T5735] usb 6-1: 0:2 : does not exist [ 438.507192][ T5594] usb 2-1: USB disconnect, device number 54 [ 438.558892][ T5735] usb 6-1: USB disconnect, device number 36 [ 438.595885][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.619009][ T5708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 438.619044][ T5708] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 438.619070][ T5708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 57664, setting to 1024 [ 438.619098][ T5708] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 438.619137][ T5708] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 438.619160][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.626697][ T5708] usb 5-1: config 0 descriptor?? [ 438.627856][T11004] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 438.653233][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 438.720591][T11017] FAULT_INJECTION: forcing a failure. [ 438.720591][T11017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.720617][T11017] CPU: 0 UID: 0 PID: 11017 Comm: syz.0.1576 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 438.720635][T11017] Tainted: [L]=SOFTLOCKUP [ 438.720640][T11017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 438.720648][T11017] Call Trace: [ 438.720653][T11017] [ 438.720658][T11017] dump_stack_lvl+0xe8/0x150 [ 438.720676][T11017] should_fail_ex+0x467/0x600 [ 438.720692][T11017] _copy_from_user+0x2d/0xb0 [ 438.720704][T11017] core_sys_select+0x50b/0xb40 [ 438.720722][T11017] ? __pfx_core_sys_select+0x10/0x10 [ 438.720743][T11017] ? __pfx_set_user_sigmask+0x10/0x10 [ 438.720758][T11017] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 438.720773][T11017] __se_sys_pselect6+0x267/0x320 [ 438.720790][T11017] ? __pfx___se_sys_pselect6+0x10/0x10 [ 438.720804][T11017] ? __pfx_ksys_write+0x10/0x10 [ 438.720817][T11017] ? rcu_is_watching+0x15/0xb0 [ 438.720832][T11017] ? __x64_sys_pselect6+0x21/0xf0 [ 438.720847][T11017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.720860][T11017] do_syscall_64+0x174/0x580 [ 438.720875][T11017] ? clear_bhb_loop+0x40/0x90 [ 438.720888][T11017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.720900][T11017] RIP: 0033:0x7f89afecce59 [ 438.720912][T11017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.720923][T11017] RSP: 002b:00007f89ae126028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 438.720937][T11017] RAX: ffffffffffffffda RBX: 00007f89b0145fa0 RCX: 00007f89afecce59 [ 438.720947][T11017] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040 [ 438.720955][T11017] RBP: 00007f89ae126090 R08: 0000000000000000 R09: 0000000000000000 [ 438.720963][T11017] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 438.720971][T11017] R13: 00007f89b0146038 R14: 00007f89b0145fa0 R15: 00007fff610d6918 [ 438.720991][T11017] [ 438.832909][ T5708] hdpvr 5-1:0.0: firmware version 0xd9 dated LW@'^R"5DBUN=rp]E/ [ 438.832926][ T5708] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 439.356207][ T5708] hdpvr 5-1:0.0: max device number reached, device register failed [ 439.390886][ T5708] usb 5-1: USB disconnect, device number 45 [ 439.423685][T11028] FAULT_INJECTION: forcing a failure. [ 439.423685][T11028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.423714][T11028] CPU: 0 UID: 0 PID: 11028 Comm: syz.0.1579 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 439.423732][T11028] Tainted: [L]=SOFTLOCKUP [ 439.423737][T11028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 439.423744][T11028] Call Trace: [ 439.423749][T11028] [ 439.423755][T11028] dump_stack_lvl+0xe8/0x150 [ 439.423773][T11028] should_fail_ex+0x467/0x600 [ 439.423789][T11028] _copy_to_user+0x31/0xb0 [ 439.423801][T11028] simple_read_from_buffer+0xe1/0x170 [ 439.423819][T11028] proc_fail_nth_read+0x1be/0x230 [ 439.423833][T11028] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 439.423845][T11028] ? rw_verify_area+0x250/0x4d0 [ 439.423856][T11028] ? rcu_is_watching+0x15/0xb0 [ 439.423872][T11028] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 439.423883][T11028] vfs_read+0x219/0xa90 [ 439.423896][T11028] ? __pfx_vfs_read+0x10/0x10 [ 439.423908][T11028] ? rcu_is_watching+0x15/0xb0 [ 439.423922][T11028] ? trace_irq_enable+0x3b/0x140 [ 439.423936][T11028] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 439.423952][T11028] ? mutex_lock_nested+0x152/0x1d0 [ 439.423963][T11028] ? fdget_pos+0x252/0x320 [ 439.423982][T11028] ksys_read+0x156/0x270 [ 439.423994][T11028] ? __pfx_ksys_read+0x10/0x10 [ 439.424015][T11028] ? rcu_is_watching+0x15/0xb0 [ 439.424029][T11028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.424042][T11028] do_syscall_64+0x174/0x580 [ 439.424058][T11028] ? trace_irq_disable+0x3b/0x140 [ 439.424070][T11028] ? clear_bhb_loop+0x40/0x90 [ 439.424082][T11028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.424094][T11028] RIP: 0033:0x7f89afe8d68e [ 439.424106][T11028] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 439.424117][T11028] RSP: 002b:00007f89ae125fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 439.424131][T11028] RAX: ffffffffffffffda RBX: 00007f89ae1266c0 RCX: 00007f89afe8d68e [ 439.424141][T11028] RDX: 000000000000000f RSI: 00007f89ae1260a0 RDI: 0000000000000004 [ 439.424149][T11028] RBP: 00007f89ae126090 R08: 0000000000000000 R09: 0000000000000000 [ 439.424156][T11028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.424164][T11028] R13: 00007f89b0146038 R14: 00007f89b0145fa0 R15: 00007fff610d6918 [ 439.424177][T11028] [ 440.857273][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.857377][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.225371][T11043] /dev/nbd0: Can't lookup blockdev [ 441.858086][ T5822] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 442.019261][ T5822] usb 6-1: not running at top speed; connect to a high speed hub [ 442.020569][ T5822] usb 6-1: config 1 interface 0 has no altsetting 0 [ 442.022855][ T5822] usb 6-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.40 [ 442.022882][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.022929][ T5822] usb 6-1: Product: syz [ 442.022944][ T5822] usb 6-1: Manufacturer: ࠐ [ 442.022958][ T5822] usb 6-1: SerialNumber: syz [ 442.298104][ T5594] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 442.305496][T11055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.307928][T11055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.623610][ T4923] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 442.647513][ T5822] usbhid 6-1:1.0: can't add hid device: -71 [ 442.647570][ T5822] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 442.702635][ T5822] usb 6-1: USB disconnect, device number 37 [ 442.806777][ T5594] usb 2-1: Using ep0 maxpacket: 16 [ 444.044487][ T5594] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 444.044527][ T5594] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.044556][ T5594] usb 2-1: config 0 has no interface number 0 [ 444.139816][ T5594] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 444.139862][ T5594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.139928][ T5594] usb 2-1: Product: syz [ 444.139977][ T5594] usb 2-1: Manufacturer: syz [ 444.140020][ T5594] usb 2-1: SerialNumber: syz [ 444.192151][ T5594] usb 2-1: config 0 descriptor?? [ 444.223606][ T5594] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 444.223718][ T5594] uvcvideo 2-1:0.105: No valid video chain found. [ 444.503644][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1592'. [ 444.618461][ T10] usb 2-1: USB disconnect, device number 55 [ 446.319203][T11080] fuse: Bad value for 'fd' [ 446.343105][T11083] XFS (nbd5): SB validate failed with error -5. [ 446.460854][T11097] vlan2: entered promiscuous mode [ 446.460877][T11097] hsr0: entered promiscuous mode [ 446.461111][T11097] vlan2: entered allmulticast mode [ 446.461126][T11097] hsr0: entered allmulticast mode [ 446.461140][T11097] hsr_slave_0: entered allmulticast mode [ 446.461157][T11097] hsr_slave_1: entered allmulticast mode [ 446.517334][T11099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1599'. [ 446.578136][T11099] hsr_slave_0: left promiscuous mode [ 446.601060][T11099] hsr_slave_1: left promiscuous mode [ 446.658257][ T5735] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 446.768129][ T5594] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 446.788114][ T5735] usb 2-1: device descriptor read/64, error -71 [ 446.960228][ T5594] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.960258][ T5594] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 446.961331][ T5594] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 446.961360][ T5594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 446.961382][ T5594] usb 3-1: SerialNumber: syz [ 447.068780][ T5735] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 447.183356][ T5594] usb 3-1: 0:2 : does not exist [ 447.183421][ T5594] usb 3-1: unit 5: unexpected type 0x09 [ 447.198383][ T5735] usb 2-1: device descriptor read/64, error -71 [ 447.240826][ T5594] usb 3-1: USB disconnect, device number 57 [ 447.301325][T11103] loop8: detected capacity change from 0 to 7 [ 447.306532][T11103] Dev loop8: unable to read RDB block 7 [ 447.306576][T11103] loop8: unable to read partition table [ 447.306726][T11103] loop8: partition table beyond EOD, truncated [ 447.306754][T11103] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 447.310607][ T5735] usb usb2-port1: attempt power cycle [ 447.317022][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 448.218417][T11012] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 448.218564][ T5735] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 448.238665][ T5735] usb 2-1: device descriptor read/8, error -71 [ 448.403071][T11012] usb 5-1: Using ep0 maxpacket: 16 [ 448.414106][T11012] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 448.414137][T11012] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.414158][T11012] usb 5-1: Product: syz [ 448.414173][T11012] usb 5-1: Manufacturer: syz [ 448.414186][T11012] usb 5-1: SerialNumber: syz [ 448.416655][T11012] usb 5-1: config 0 descriptor?? [ 448.425821][T11012] gspca_main: spca508-2.14.0 probing 041e:4018 [ 448.478876][ T5735] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 449.078712][T11012] gspca_spca508: reg_read err -110 [ 449.080948][T11012] gspca_spca508: reg_read err -32 [ 449.084340][T11012] gspca_spca508: reg_read err -32 [ 449.091522][T11012] gspca_spca508: reg_read err -32 [ 449.098879][T11012] gspca_spca508: reg_read err -32 [ 449.103593][T11012] gspca_spca508: reg write: error -32 [ 449.155424][T11012] spca508 5-1:0.0: probe with driver spca508 failed with error -32 [ 449.557344][ T5735] usb 2-1: device descriptor read/8, error -71 [ 449.773493][ T5735] usb usb2-port1: unable to enumerate USB device [ 449.860619][T11123] /dev/nbd0: Can't lookup blockdev [ 450.148373][T11137] loop8: detected capacity change from 0 to 7 [ 450.150071][T11137] Dev loop8: unable to read RDB block 7 [ 450.150116][T11137] loop8: unable to read partition table [ 450.150259][T11137] loop8: partition table beyond EOD, truncated [ 450.151172][T11137] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 450.343133][ T5594] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 450.742566][ T5594] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.742870][ T5594] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 450.824717][ T5594] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 450.824896][ T5594] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 450.825164][ T5594] usb 6-1: SerialNumber: syz [ 452.102234][T11150] netlink: 'syz.0.1616': attribute type 1 has an invalid length. [ 452.102260][T11150] netlink: 2096 bytes leftover after parsing attributes in process `syz.0.1616'. [ 452.102279][T11150] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1616'. [ 452.154046][ T5594] usb 6-1: 0:2 : does not exist [ 452.154122][ T5594] usb 6-1: unit 5: unexpected type 0x09 [ 452.198327][ T5594] usb 6-1: USB disconnect, device number 38 [ 452.228055][ T822] usb 5-1: USB disconnect, device number 46 [ 452.235401][T11154] FAULT_INJECTION: forcing a failure. [ 452.235401][T11154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.235440][T11154] CPU: 1 UID: 0 PID: 11154 Comm: syz.0.1618 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 452.235471][T11154] Tainted: [L]=SOFTLOCKUP [ 452.235479][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 452.235491][T11154] Call Trace: [ 452.235500][T11154] [ 452.235509][T11154] dump_stack_lvl+0xe8/0x150 [ 452.235538][T11154] should_fail_ex+0x467/0x600 [ 452.235568][T11154] _copy_to_user+0x31/0xb0 [ 452.235589][T11154] simple_read_from_buffer+0xe1/0x170 [ 452.235624][T11154] proc_fail_nth_read+0x1be/0x230 [ 452.235644][T11154] ? __fget_files+0x2a/0x420 [ 452.235672][T11154] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 452.235696][T11154] ? rw_verify_area+0x250/0x4d0 [ 452.235718][T11154] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 452.235738][T11154] vfs_read+0x219/0xa90 [ 452.235761][T11154] ? __pfx_vfs_read+0x10/0x10 [ 452.235791][T11154] ? rcu_is_watching+0x15/0xb0 [ 452.235819][T11154] ? trace_irq_enable+0x3b/0x140 [ 452.235843][T11154] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 452.235871][T11154] ? mutex_lock_nested+0x152/0x1d0 [ 452.235891][T11154] ? fdget_pos+0x252/0x320 [ 452.235924][T11154] ksys_read+0x156/0x270 [ 452.235946][T11154] ? __pfx_ksys_read+0x10/0x10 [ 452.235968][T11154] ? rcu_is_watching+0x15/0xb0 [ 452.235994][T11154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.236015][T11154] do_syscall_64+0x174/0x580 [ 452.236041][T11154] ? trace_irq_disable+0x3b/0x140 [ 452.236061][T11154] ? clear_bhb_loop+0x40/0x90 [ 452.236084][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.236102][T11154] RIP: 0033:0x7f89afe8d68e [ 452.236121][T11154] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 452.236139][T11154] RSP: 002b:00007f89ae125fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 452.236163][T11154] RAX: ffffffffffffffda RBX: 00007f89ae1266c0 RCX: 00007f89afe8d68e [ 452.236177][T11154] RDX: 000000000000000f RSI: 00007f89ae1260a0 RDI: 0000000000000004 [ 452.236191][T11154] RBP: 00007f89ae126090 R08: 0000000000000000 R09: 0000000000000000 [ 452.236204][T11154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.236216][T11154] R13: 00007f89b0146038 R14: 00007f89b0145fa0 R15: 00007fff610d6918 [ 452.236239][T11154] [ 452.499623][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 452.528209][T11162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1619'. [ 452.822992][T11170] block nbd0: not configured, cannot reconfigure [ 452.968121][ T822] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 453.776069][ T822] usb 3-1: Using ep0 maxpacket: 8 [ 453.779240][ T822] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.779275][ T822] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 453.779299][ T822] usb 3-1: config 0 interface 0 has no altsetting 0 [ 453.779336][ T822] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 453.779357][ T822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.791018][ T822] usb 3-1: config 0 descriptor?? [ 453.823205][T11185] fuse: Unknown parameter 'grou00000000000000000000' [ 453.923158][T11191] /dev/nbd0: Can't lookup blockdev [ 454.008198][ T10] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 454.169294][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 454.170396][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 454.172374][ T10] usb 6-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.40 [ 454.172401][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.172420][ T10] usb 6-1: Product: syz [ 454.172435][ T10] usb 6-1: Manufacturer: ࠐ [ 454.172473][ T10] usb 6-1: SerialNumber: syz [ 454.215828][ T822] samsung 0003:0419:0600.001F: unknown main item tag 0x0 [ 454.215910][ T822] samsung 0003:0419:0600.001F: unknown main item tag 0x0 [ 454.215935][ T822] samsung 0003:0419:0600.001F: unknown main item tag 0x0 [ 454.215960][ T822] samsung 0003:0419:0600.001F: unknown main item tag 0x0 [ 454.215984][ T822] samsung 0003:0419:0600.001F: unknown main item tag 0x0 [ 454.216110][ T822] samsung 0003:0419:0600.001F: unknown main item tag 0x0 [ 454.216136][ T822] samsung 0003:0419:0600.001F: unknown main item tag 0x0 [ 454.216192][ T822] samsung 0003:0419:0600.001F: unknown main item tag 0x0 [ 454.216268][ T822] samsung 0003:0419:0600.001F: unknown main item tag 0x0 [ 454.216294][ T822] samsung 0003:0419:0600.001F: unknown main item tag 0x0 [ 454.216552][ T822] samsung 0003:0419:0600.001F: unbalanced collection at end of report description [ 454.217157][ T822] samsung 0003:0419:0600.001F: parse failed [ 454.217235][ T822] samsung 0003:0419:0600.001F: probe with driver samsung failed with error -22 [ 454.381473][T11180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.381812][T11180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.428191][ T5822] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 454.526903][T11203] netlink: 'syz.2.1622': attribute type 11 has an invalid length. [ 454.527007][T11203] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.1622'. [ 454.645250][ T5822] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 454.645431][ T5822] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 454.645563][ T5822] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 454.674644][ T5822] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 454.675415][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.675445][ T5822] usb 5-1: Product: syz [ 454.676775][ T5822] usb 5-1: Manufacturer: syz [ 454.676792][ T5822] usb 5-1: SerialNumber: syz [ 454.740546][ T5822] usb 5-1: config 0 descriptor?? [ 454.750440][T11200] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 454.759639][T11200] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 454.799231][ T5822] usb 5-1: ucan: probing device on interface #0 [ 455.500020][ T5822] usb 5-1: ucan: device reported invalid device info [ 455.500045][ T5822] usb 5-1: ucan: probe failed; try to update the device firmware [ 456.181894][ T10] usbhid 6-1:1.0: can't add hid device: -71 [ 456.183951][ T10] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 456.230731][ T10] usb 6-1: USB disconnect, device number 39 [ 456.297062][ T5701] usb 5-1: USB disconnect, device number 47 [ 456.459659][ T5594] usb 3-1: USB disconnect, device number 58 [ 458.013471][T11258] FAULT_INJECTION: forcing a failure. [ 458.013471][T11258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.013512][T11258] CPU: 0 UID: 0 PID: 11258 Comm: syz.4.1641 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 458.013544][T11258] Tainted: [L]=SOFTLOCKUP [ 458.013552][T11258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 458.013566][T11258] Call Trace: [ 458.013574][T11258] [ 458.013584][T11258] dump_stack_lvl+0xe8/0x150 [ 458.013614][T11258] should_fail_ex+0x467/0x600 [ 458.013644][T11258] _copy_from_user+0x2d/0xb0 [ 458.013665][T11258] __sys_bpf+0x229/0x950 [ 458.013769][T11258] ? __pfx___sys_bpf+0x10/0x10 [ 458.013797][T11258] ? ksys_write+0x248/0x270 [ 458.013821][T11258] ? __pfx_ksys_write+0x10/0x10 [ 458.013846][T11258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.013869][T11258] __x64_sys_bpf+0x7c/0x90 [ 458.013890][T11258] do_syscall_64+0x174/0x580 [ 458.013920][T11258] ? clear_bhb_loop+0x40/0x90 [ 458.013945][T11258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.013966][T11258] RIP: 0033:0x7ffa4441ce59 [ 458.013986][T11258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.014006][T11258] RSP: 002b:00007ffa42634028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 458.014030][T11258] RAX: ffffffffffffffda RBX: 00007ffa44696180 RCX: 00007ffa4441ce59 [ 458.014047][T11258] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 000000000000001c [ 458.014062][T11258] RBP: 00007ffa42634090 R08: 0000000000000000 R09: 0000000000000000 [ 458.014091][T11258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.014106][T11258] R13: 00007ffa44696218 R14: 00007ffa44696180 R15: 00007ffeb29cefb8 [ 458.014129][T11258] [ 459.257685][T11259] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1640'. [ 459.508390][ T5735] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 459.670256][ T5735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.670299][ T5735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.670323][ T5735] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 459.670365][ T5735] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 459.670390][ T5735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.675228][ T5735] usb 3-1: config 0 descriptor?? [ 459.688255][ T5594] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 459.839668][ T5594] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.839698][ T5594] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 459.840731][ T5594] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 459.840758][ T5594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 459.840788][ T5594] usb 2-1: SerialNumber: syz [ 460.105214][ T5735] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 460.283083][ T5594] usb 2-1: 0:2 : does not exist [ 460.283137][ T5594] usb 2-1: unit 5: unexpected type 0x09 [ 460.303936][ T5594] usb 2-1: USB disconnect, device number 60 [ 460.333357][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 460.400309][T11254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.400495][T11254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.493176][ C1] plantronics 0003:047F:FFFF.0020: usb_submit_urb(ctrl) failed: -1 [ 461.542605][T11254] [U]  [ 461.889476][ T5701] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 461.961372][ T5594] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 462.178222][ T5594] usb 2-1: Using ep0 maxpacket: 32 [ 462.212749][ T5594] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.212795][ T5594] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.438512][ T5594] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 462.438555][ T5594] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 462.438612][ T5594] usb 2-1: Product: syz [ 462.438637][ T5594] usb 2-1: Manufacturer: syz [ 462.500492][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 462.500526][ T5701] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 462.505803][ T5708] usb 3-1: USB disconnect, device number 59 [ 462.532639][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 57664, setting to 1024 [ 462.532687][ T5701] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 462.532727][ T5701] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 462.532752][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.036880][ T5701] usb 5-1: config 0 descriptor?? [ 465.060659][ T5594] hub 2-1:4.0: USB hub found [ 465.146315][ T5701] usb 5-1: can't set config #0, error -71 [ 465.158928][ T5701] usb 5-1: USB disconnect, device number 48 [ 465.207758][ T5594] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 465.274058][ T5594] usb 2-1: USB disconnect, device number 61 [ 465.302966][T11313] loop8: detected capacity change from 0 to 7 [ 465.307545][T11313] Dev loop8: unable to read RDB block 7 [ 465.307575][T11313] loop8: unable to read partition table [ 465.307710][T11313] loop8: partition table beyond EOD, truncated [ 465.307730][T11313] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 466.312139][T11327] FAULT_INJECTION: forcing a failure. [ 466.312139][T11327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.312167][T11327] CPU: 0 UID: 0 PID: 11327 Comm: syz.4.1665 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 466.312186][T11327] Tainted: [L]=SOFTLOCKUP [ 466.312190][T11327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 466.312197][T11327] Call Trace: [ 466.312202][T11327] [ 466.312208][T11327] dump_stack_lvl+0xe8/0x150 [ 466.312226][T11327] should_fail_ex+0x467/0x600 [ 466.312243][T11327] _copy_from_user+0x2d/0xb0 [ 466.312255][T11327] snd_pcm_oss_write2+0x227/0x440 [ 466.312335][T11327] ? lock_release+0x4b/0x3c0 [ 466.312350][T11327] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 466.312364][T11327] ? up_read+0x2b/0x160 [ 466.312456][T11327] ? snd_pcm_action_nonatomic+0x25c/0x2b0 [ 466.312492][T11327] snd_pcm_oss_write+0x664/0xb40 [ 466.312508][T11327] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 466.312522][T11327] vfs_write+0x29f/0xbb0 [ 466.312536][T11327] ? __pfx_vfs_write+0x10/0x10 [ 466.312547][T11327] ? lock_release+0x4b/0x3c0 [ 466.312559][T11327] ? rt_mutex_slowunlock+0x219/0x460 [ 466.312573][T11327] ? __fget_files+0x2a/0x420 [ 466.312589][T11327] ? __fget_files+0x3a8/0x420 [ 466.312611][T11327] ? __fget_files+0x2a/0x420 [ 466.312634][T11327] ksys_write+0x156/0x270 [ 466.312656][T11327] ? __pfx_ksys_write+0x10/0x10 [ 466.312679][T11327] ? rcu_is_watching+0x15/0xb0 [ 466.312696][T11327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.312709][T11327] do_syscall_64+0x174/0x580 [ 466.312723][T11327] ? trace_irq_disable+0x3b/0x140 [ 466.312736][T11327] ? clear_bhb_loop+0x40/0x90 [ 466.312749][T11327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.312760][T11327] RIP: 0033:0x7ffa4441ce59 [ 466.312772][T11327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.312783][T11327] RSP: 002b:00007ffa42676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 466.312799][T11327] RAX: ffffffffffffffda RBX: 00007ffa44695fa0 RCX: 00007ffa4441ce59 [ 466.312808][T11327] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000005 [ 466.312817][T11327] RBP: 00007ffa42676090 R08: 0000000000000000 R09: 0000000000000000 [ 466.312825][T11327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.312832][T11327] R13: 00007ffa44696038 R14: 00007ffa44695fa0 R15: 00007ffeb29cefb8 [ 466.312845][T11327] [ 466.678597][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 466.808178][ T10] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 466.843186][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.843209][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 466.844050][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 466.844068][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 466.844080][ T9] usb 3-1: SerialNumber: syz [ 466.980069][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.980101][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 466.981418][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 466.981446][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 466.981464][ T10] usb 2-1: SerialNumber: syz [ 467.951442][ T10] usb 2-1: 0:2 : does not exist [ 468.097124][ T10] usb 2-1: USB disconnect, device number 62 [ 468.238706][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.342331][ T9] usb 3-1: 0:2 : does not exist [ 468.342375][ T9] usb 3-1: unit 5: unexpected type 0x09 [ 468.380685][ T9] usb 3-1: USB disconnect, device number 60 [ 468.406082][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.531425][T11343] netlink: 'syz.5.1670': attribute type 7 has an invalid length. [ 468.531790][T11343] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1670'. [ 468.589565][T11345] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 469.129675][ T5708] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 469.298902][ T5708] usb 2-1: Using ep0 maxpacket: 32 [ 469.393440][ T5708] usb 2-1: unable to get BOS descriptor or descriptor too short [ 469.471482][ T5708] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 469.472376][ T5708] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.472482][ T5708] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 469.569106][ T5708] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 469.569141][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.569343][ T5708] usb 2-1: Product: syz [ 469.569360][ T5708] usb 2-1: Manufacturer: syz [ 469.569376][ T5708] usb 2-1: SerialNumber: syz [ 469.795224][ T5708] usb 2-1: 0:2 : does not exist [ 469.795287][ T5708] usb 2-1: unit 0 not found! [ 470.178662][ T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 470.602789][ T5708] usb 2-1: USB disconnect, device number 63 [ 470.628063][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 470.641020][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 470.656029][ T9] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 470.656065][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.656086][ T9] usb 3-1: Product: syz [ 470.656110][ T9] usb 3-1: Manufacturer: syz [ 470.656126][ T9] usb 3-1: SerialNumber: syz [ 470.691113][T11375] FAULT_INJECTION: forcing a failure. [ 470.691113][T11375] name failslab, interval 1, probability 0, space 0, times 0 [ 470.691150][T11375] CPU: 1 UID: 0 PID: 11375 Comm: syz.1.1681 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 470.691179][T11375] Tainted: [L]=SOFTLOCKUP [ 470.691186][T11375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 470.691198][T11375] Call Trace: [ 470.691205][T11375] [ 470.691213][T11375] dump_stack_lvl+0xe8/0x150 [ 470.691243][T11375] should_fail_ex+0x467/0x600 [ 470.691268][T11375] should_failslab+0xa8/0x100 [ 470.691291][T11375] kmem_cache_alloc_node_noprof+0x8f/0x710 [ 470.691312][T11375] ? __alloc_skb+0x1d7/0x7a0 [ 470.691406][T11375] __alloc_skb+0x1d7/0x7a0 [ 470.691430][T11375] alloc_skb_with_frags+0xc6/0x760 [ 470.691456][T11375] ? rcu_is_watching+0x15/0xb0 [ 470.691480][T11375] ? lock_release+0x4b/0x3c0 [ 470.691502][T11375] sock_alloc_send_pskb+0x884/0x9a0 [ 470.691536][T11375] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 470.691562][T11375] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 470.691632][T11375] ? __might_fault+0xaf/0x130 [ 470.691652][T11375] ? rcu_is_watching+0x15/0xb0 [ 470.691675][T11375] ? lock_acquire+0x5f/0x350 [ 470.691696][T11375] ? _parse_integer_limit+0x1ae/0x1f0 [ 470.691745][T11375] hci_sock_sendmsg+0x208/0xf50 [ 470.691769][T11375] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 470.691792][T11375] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 470.691858][T11375] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 470.691878][T11375] sock_write_iter+0x49e/0x4f0 [ 470.691898][T11375] ? __pfx_sock_write_iter+0x10/0x10 [ 470.691919][T11375] ? lock_release+0x4b/0x3c0 [ 470.691937][T11375] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 470.691956][T11375] ? bpf_lsm_file_permission+0x9/0x20 [ 470.691993][T11375] ? security_file_permission+0x75/0x260 [ 470.692023][T11375] vfs_write+0x61e/0xbb0 [ 470.692045][T11375] ? __pfx_vfs_write+0x10/0x10 [ 470.692068][T11375] ? __fget_files+0x2a/0x420 [ 470.692095][T11375] ksys_write+0x156/0x270 [ 470.692116][T11375] ? __pfx_ksys_write+0x10/0x10 [ 470.692136][T11375] ? rcu_is_watching+0x15/0xb0 [ 470.692159][T11375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.692178][T11375] do_syscall_64+0x174/0x580 [ 470.692202][T11375] ? trace_irq_disable+0x3b/0x140 [ 470.692222][T11375] ? clear_bhb_loop+0x40/0x90 [ 470.692242][T11375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.692260][T11375] RIP: 0033:0x7f0cc14ace59 [ 470.692278][T11375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.692294][T11375] RSP: 002b:00007f0cbf706028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 470.692316][T11375] RAX: ffffffffffffffda RBX: 00007f0cc1725fa0 RCX: 00007f0cc14ace59 [ 470.692331][T11375] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000017 [ 470.692344][T11375] RBP: 00007f0cbf706090 R08: 0000000000000000 R09: 0000000000000000 [ 470.692356][T11375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.692368][T11375] R13: 00007f0cc1726038 R14: 00007f0cc1725fa0 R15: 00007ffee3912a18 [ 470.692388][T11375] [ 470.729190][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.749201][ T9] usb 3-1: config 0 descriptor?? [ 470.893946][ T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 470.938066][T11012] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 471.010970][ T9] usb 3-1: Detected FT232B [ 471.051544][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 471.052415][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 471.054659][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 471.085158][ T9] usb 3-1: USB disconnect, device number 61 [ 471.088140][T11012] usb 6-1: Using ep0 maxpacket: 32 [ 471.091853][T11012] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.091886][T11012] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.091920][T11012] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 471.091943][T11012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.106587][T11012] usb 6-1: config 0 descriptor?? [ 471.116485][T11012] hub 6-1:0.0: USB hub found [ 471.147771][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 471.159192][ T9] ftdi_sio 3-1:0.0: device disconnected [ 471.182588][T11383] FAULT_INJECTION: forcing a failure. [ 471.182588][T11383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.182634][T11383] CPU: 0 UID: 0 PID: 11383 Comm: syz.0.1686 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 471.182664][T11383] Tainted: [L]=SOFTLOCKUP [ 471.182672][T11383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 471.182684][T11383] Call Trace: [ 471.182692][T11383] [ 471.182701][T11383] dump_stack_lvl+0xe8/0x150 [ 471.182731][T11383] should_fail_ex+0x467/0x600 [ 471.182759][T11383] _copy_to_user+0x31/0xb0 [ 471.182779][T11383] simple_read_from_buffer+0xe1/0x170 [ 471.182812][T11383] proc_fail_nth_read+0x1be/0x230 [ 471.182834][T11383] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 471.182856][T11383] ? rw_verify_area+0x250/0x4d0 [ 471.182874][T11383] ? rcu_is_watching+0x15/0xb0 [ 471.182900][T11383] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 471.182918][T11383] vfs_read+0x219/0xa90 [ 471.182938][T11383] ? __pfx_vfs_read+0x10/0x10 [ 471.182957][T11383] ? rcu_is_watching+0x15/0xb0 [ 471.182981][T11383] ? trace_irq_enable+0x3b/0x140 [ 471.183004][T11383] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 471.183041][T11383] ? mutex_lock_nested+0x152/0x1d0 [ 471.183061][T11383] ? fdget_pos+0x252/0x320 [ 471.183093][T11383] ksys_read+0x156/0x270 [ 471.183114][T11383] ? __pfx_ksys_read+0x10/0x10 [ 471.183134][T11383] ? rcu_is_watching+0x15/0xb0 [ 471.183161][T11383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.183183][T11383] do_syscall_64+0x174/0x580 [ 471.183208][T11383] ? trace_irq_disable+0x3b/0x140 [ 471.183230][T11383] ? clear_bhb_loop+0x40/0x90 [ 471.183253][T11383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.183272][T11383] RIP: 0033:0x7f89afe8d68e [ 471.183292][T11383] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 471.183310][T11383] RSP: 002b:00007f89ae125fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 471.183335][T11383] RAX: ffffffffffffffda RBX: 00007f89ae1266c0 RCX: 00007f89afe8d68e [ 471.183352][T11383] RDX: 000000000000000f RSI: 00007f89ae1260a0 RDI: 0000000000000003 [ 471.183367][T11383] RBP: 00007f89ae126090 R08: 0000000000000000 R09: 0000000000000000 [ 471.183382][T11383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.183396][T11383] R13: 00007f89b0146038 R14: 00007f89b0145fa0 R15: 00007fff610d6918 [ 471.183421][T11383] [ 471.324664][T11012] hub 6-1:0.0: 1 port detected [ 471.488148][ T5803] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 471.638173][ T5803] usb 5-1: Using ep0 maxpacket: 16 [ 471.640380][ T5803] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 471.643615][ T5803] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 471.643654][ T5803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.643677][ T5803] usb 5-1: Product: syz [ 471.643692][ T5803] usb 5-1: Manufacturer: syz [ 471.643707][ T5803] usb 5-1: SerialNumber: syz [ 471.658871][ T5708] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 471.662197][ T5803] usb 5-1: config 0 descriptor?? [ 471.679281][ T5803] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 471.683728][ T5803] usb 5-1: Detected FT232B [ 472.414591][ T5803] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 472.414993][ T5803] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 472.419877][ T5803] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 472.425923][ T5803] usb 5-1: USB disconnect, device number 49 [ 472.435294][ T5803] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 472.435668][ T5803] ftdi_sio 5-1:0.0: device disconnected [ 472.491085][ T5708] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.491115][ T5708] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 472.493020][ T5708] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 472.493058][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 472.493081][ T5708] usb 2-1: SerialNumber: syz [ 472.548567][ T5594] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 472.566866][T11402] FAULT_INJECTION: forcing a failure. [ 472.566866][T11402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.566901][T11402] CPU: 0 UID: 0 PID: 11402 Comm: syz.0.1694 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 472.566919][T11402] Tainted: [L]=SOFTLOCKUP [ 472.566924][T11402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 472.566932][T11402] Call Trace: [ 472.566937][T11402] [ 472.566944][T11402] dump_stack_lvl+0xe8/0x150 [ 472.566973][T11402] should_fail_ex+0x467/0x600 [ 472.567002][T11402] _copy_from_user+0x2d/0xb0 [ 472.567022][T11402] ___sys_sendmsg+0x1c6/0x360 [ 472.567050][T11402] ? get_pid_task+0x20/0x1f0 [ 472.567068][T11402] ? __pfx____sys_sendmsg+0x10/0x10 [ 472.567091][T11402] ? __fget_files+0x2a/0x420 [ 472.567108][T11402] ? __fget_files+0x3a8/0x420 [ 472.567138][T11402] __x64_sys_sendmsg+0x1c3/0x2a0 [ 472.567166][T11402] ? lock_release+0x4b/0x3c0 [ 472.567187][T11402] ? fdget_pos+0x252/0x320 [ 472.567214][T11402] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 472.567236][T11402] ? __pfx_ksys_write+0x10/0x10 [ 472.567249][T11402] ? rcu_is_watching+0x15/0xb0 [ 472.567264][T11402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.567283][T11402] do_syscall_64+0x174/0x580 [ 472.567309][T11402] ? trace_irq_disable+0x3b/0x140 [ 472.567331][T11402] ? clear_bhb_loop+0x40/0x90 [ 472.567353][T11402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.567372][T11402] RIP: 0033:0x7f89afecce59 [ 472.567389][T11402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.567400][T11402] RSP: 002b:00007f89ae126028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.567414][T11402] RAX: ffffffffffffffda RBX: 00007f89b0145fa0 RCX: 00007f89afecce59 [ 472.567423][T11402] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 472.567433][T11402] RBP: 00007f89ae126090 R08: 0000000000000000 R09: 0000000000000000 [ 472.567446][T11402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.567459][T11402] R13: 00007f89b0146038 R14: 00007f89b0145fa0 R15: 00007fff610d6918 [ 472.567482][T11402] [ 472.614822][T11012] hub 6-1:0.0: activate --> -90 [ 472.699270][ T5594] usb 3-1: Using ep0 maxpacket: 32 [ 472.758565][ T5594] usb 3-1: unable to get BOS descriptor or descriptor too short [ 472.778101][ T5594] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 472.778127][ T5594] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.778141][ T5594] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 472.822058][T11012] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 472.822541][ T9] usb 6-1: USB disconnect, device number 40 [ 472.822692][ T12] usb 6-1: Failed to suspend device, error -19 [ 472.848349][ T5594] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 472.848384][ T5594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.848406][ T5594] usb 3-1: Product: syz [ 472.848422][ T5594] usb 3-1: Manufacturer: syz [ 472.848437][ T5594] usb 3-1: SerialNumber: syz [ 472.885396][ T5708] usb 2-1: 0:2 : does not exist [ 472.907454][ T5708] usb 2-1: USB disconnect, device number 64 [ 472.940258][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.427192][ T5594] usb 3-1: 0:2 : does not exist [ 473.427254][ T5594] usb 3-1: unit 0 not found! [ 473.464374][ T5594] usb 3-1: USB disconnect, device number 62 [ 473.510779][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.818143][ T9] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 473.898201][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 473.972307][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.972331][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.972344][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 473.972368][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 473.972383][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.975835][ T9] usb 6-1: config 0 descriptor?? [ 474.022574][T11425] Bluetooth: hci0: unsupported parameter 255 [ 474.022638][T11425] Bluetooth: hci0: unsupported parameter 255 [ 474.070863][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 474.070897][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 474.071129][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 57664, setting to 1024 [ 474.071162][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 474.071201][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 474.071225][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.091862][ T10] usb 2-1: config 0 descriptor?? [ 474.124794][T11423] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 474.234141][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1705'. [ 474.351828][ T10] hdpvr 2-1:0.0: firmware version 0xd9 dated LW@'^R"5DBUN=rp]E/ [ 474.351846][ T10] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 474.423329][ T9] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 474.521096][ T36] kauditd_printk_skb: 142 callbacks suppressed [ 474.521118][ T36] audit: type=1326 audit(1781581787.896:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11437 comm="syz.0.1708" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89afecce59 code=0x7ffc0000 [ 474.523084][ T36] audit: type=1326 audit(1781581787.896:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11437 comm="syz.0.1708" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89afecce59 code=0x7ffc0000 [ 474.523130][ T36] audit: type=1326 audit(1781581787.896:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11437 comm="syz.0.1708" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89afecce59 code=0x7ffc0000 [ 474.523165][ T36] audit: type=1326 audit(1781581787.896:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11437 comm="syz.0.1708" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89afecce59 code=0x7ffc0000 [ 474.523565][ T36] audit: type=1326 audit(1781581787.896:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11437 comm="syz.0.1708" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f89afeccbc2 code=0x7ffc0000 [ 474.523606][ T36] audit: type=1326 audit(1781581787.896:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11437 comm="syz.0.1708" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f89afeccc57 code=0x7ffc0000 [ 474.523778][ T36] audit: type=1326 audit(1781581787.896:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11437 comm="syz.0.1708" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f89afe89b51 code=0x7ffc0000 [ 474.524329][ T36] audit: type=1326 audit(1781581787.896:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11437 comm="syz.0.1708" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f89afecdc49 code=0x7ffc0000 [ 474.524384][ T36] audit: type=1326 audit(1781581787.896:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11437 comm="syz.0.1708" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f89afecce59 code=0x7ffc0000 [ 474.524426][ T36] audit: type=1326 audit(1781581787.896:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11437 comm="syz.0.1708" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f89afe89bbb code=0x7ffc0000 [ 474.565461][T11438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1708'. [ 474.619391][ T822] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 474.779784][ T822] usb 5-1: Using ep0 maxpacket: 16 [ 474.789574][ T822] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 474.815370][ T822] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 474.815392][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.815404][ T822] usb 5-1: Product: syz [ 474.815413][ T822] usb 5-1: Manufacturer: syz [ 474.815421][ T822] usb 5-1: SerialNumber: syz [ 474.853076][ T822] usb 5-1: config 0 descriptor?? [ 474.865740][ T822] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 474.870693][ T822] usb 5-1: Detected FT232B [ 475.037942][T11446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.048869][T11446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.065057][ T822] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 475.065936][ T822] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 475.741413][ T822] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 475.823104][ T822] usb 5-1: USB disconnect, device number 50 [ 475.838978][ T822] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 475.841662][ T822] ftdi_sio 5-1:0.0: device disconnected [ 475.925807][ T10] hdpvr 2-1:0.0: max device number reached, device register failed [ 475.963538][ T10] usb 2-1: USB disconnect, device number 65 [ 475.970382][ C1] plantronics 0003:047F:FFFF.0021: usb_submit_urb(ctrl) failed: -1 [ 475.993700][T11418] [U]  [ 476.449681][ T5594] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 476.598271][ T5594] usb 3-1: Using ep0 maxpacket: 32 [ 476.600100][ T5594] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 476.600130][ T5594] usb 3-1: config 0 has no interface number 0 [ 476.602278][ T5594] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 476.602307][ T5594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.602327][ T5594] usb 3-1: Product: syz [ 476.602342][ T5594] usb 3-1: Manufacturer: syz [ 476.602356][ T5594] usb 3-1: SerialNumber: syz [ 476.608803][T11474] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 476.622987][ T5803] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 476.654552][T11475] FAULT_INJECTION: forcing a failure. [ 476.654552][T11475] name failslab, interval 1, probability 0, space 0, times 0 [ 476.654596][T11475] CPU: 0 UID: 0 PID: 11475 Comm: syz.1.1714 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 476.654624][T11475] Tainted: [L]=SOFTLOCKUP [ 476.654631][T11475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 476.654642][T11475] Call Trace: [ 476.654649][T11475] [ 476.654657][T11475] dump_stack_lvl+0xe8/0x150 [ 476.654684][T11475] should_fail_ex+0x467/0x600 [ 476.654709][T11475] should_failslab+0xa8/0x100 [ 476.654731][T11475] __kmalloc_noprof+0xdf/0x7a0 [ 476.654749][T11475] ? kfree+0x4d/0x6c0 [ 476.654766][T11475] ? get_pid_task+0x20/0x1f0 [ 476.654783][T11475] ? tomoyo_realpath_from_path+0xef/0x640 [ 476.654808][T11475] tomoyo_realpath_from_path+0xef/0x640 [ 476.654829][T11475] ? lock_release+0x4b/0x3c0 [ 476.654852][T11475] ? tomoyo_path_number_perm+0x219/0x5f0 [ 476.654878][T11475] tomoyo_path_number_perm+0x246/0x5f0 [ 476.654904][T11475] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 476.654924][T11475] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 476.654950][T11475] ? do_raw_spin_lock+0x12b/0x2f0 [ 476.654967][T11475] ? rcu_is_watching+0x15/0xb0 [ 476.654992][T11475] ? rcu_is_watching+0x15/0xb0 [ 476.655017][T11475] ? trace_irq_enable+0x3b/0x140 [ 476.655035][T11475] ? hook_file_ioctl+0x1f3/0x5d0 [ 476.655069][T11475] ? lock_release+0x4b/0x3c0 [ 476.655091][T11475] ? __fget_files+0x2a/0x420 [ 476.655115][T11475] ? __fget_files+0x3a8/0x420 [ 476.655139][T11475] ? __fget_files+0x2a/0x420 [ 476.655167][T11475] security_file_ioctl+0xc3/0x2a0 [ 476.655195][T11475] __se_sys_ioctl+0x47/0x170 [ 476.655215][T11475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.655235][T11475] do_syscall_64+0x174/0x580 [ 476.655258][T11475] ? trace_irq_disable+0x3b/0x140 [ 476.655277][T11475] ? clear_bhb_loop+0x40/0x90 [ 476.655298][T11475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.655316][T11475] RIP: 0033:0x7f0cc14ace59 [ 476.655333][T11475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.655350][T11475] RSP: 002b:00007f0cbf6e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 476.655372][T11475] RAX: ffffffffffffffda RBX: 00007f0cc1726090 RCX: 00007f0cc14ace59 [ 476.655387][T11475] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 476.655399][T11475] RBP: 00007f0cbf6e5090 R08: 0000000000000000 R09: 0000000000000000 [ 476.655412][T11475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.655424][T11475] R13: 00007f0cc1726128 R14: 00007f0cc1726090 R15: 00007ffee3912a18 [ 476.655444][T11475] [ 476.657010][T11475] ERROR: Out of memory at tomoyo_realpath_from_path. [ 476.708757][ T5594] usb 3-1: config 0 descriptor?? [ 476.847159][T11012] usb 6-1: USB disconnect, device number 41 [ 476.967099][ T5803] usb 5-1: not running at top speed; connect to a high speed hub [ 476.975992][ T5803] usb 5-1: config 1 interface 0 has no altsetting 0 [ 476.983298][ T5803] usb 5-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.40 [ 476.983333][ T5803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.983355][ T5803] usb 5-1: Product: syz [ 476.983370][ T5803] usb 5-1: Manufacturer: ࠐ [ 476.983385][ T5803] usb 5-1: SerialNumber: syz [ 477.135690][T11492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1716'. [ 477.181839][ T5594] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 477.181922][ T5594] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 477.231375][T11465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.232651][T11465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.281455][ T5803] usbhid 5-1:1.0: can't add hid device: -71 [ 477.281906][ T5803] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 477.317511][ T5803] usb 5-1: USB disconnect, device number 51 [ 477.385246][ T5594] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 477.385447][ T5594] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 477.595642][ T4923] Bluetooth: hci0: unexpected event 0x3e length: 317 > 260 [ 477.595673][ T4923] Bluetooth: hci0: unexpected subevent 0x0d length: 316 > 260 [ 477.595750][ T4923] Bluetooth: hci0: adv larger than maximum supported [ 477.595766][ T4923] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 478.668130][ T822] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 478.830295][ T822] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.830315][ T822] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 478.831224][ T822] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 478.831250][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 478.831271][ T822] usb 2-1: SerialNumber: syz [ 479.008075][ T5803] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 479.041664][ T822] usb 2-1: 0:2 : does not exist [ 479.058100][ T822] usb 2-1: USB disconnect, device number 66 [ 479.083216][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 479.159546][ T5803] usb 5-1: config 0 has an invalid interface number: 158 but max is 0 [ 479.159577][ T5803] usb 5-1: config 0 has no interface number 0 [ 479.159605][ T5803] usb 5-1: too many endpoints for config 0 interface 158 altsetting 52: 72, using maximum allowed: 30 [ 479.159642][ T5803] usb 5-1: config 0 interface 158 altsetting 52 has 0 endpoint descriptors, different from the interface descriptor's value: 72 [ 479.159663][ T5803] usb 5-1: config 0 interface 158 has no altsetting 0 [ 479.161514][ T5803] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 479.161543][ T5803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.161563][ T5803] usb 5-1: Product: syz [ 479.161578][ T5803] usb 5-1: Manufacturer: syz [ 479.161592][ T5803] usb 5-1: SerialNumber: syz [ 479.163478][ T5803] usb 5-1: config 0 descriptor?? [ 479.221404][ T10] usb 3-1: USB disconnect, device number 63 [ 479.727173][T11531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.727516][T11531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.768686][ T5803] usb 5-1: USB disconnect, device number 52 [ 480.243825][T11554] FAULT_INJECTION: forcing a failure. [ 480.243825][T11554] name failslab, interval 1, probability 0, space 0, times 0 [ 480.243866][T11554] CPU: 0 UID: 0 PID: 11554 Comm: syz.2.1727 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 480.243895][T11554] Tainted: [L]=SOFTLOCKUP [ 480.243906][T11554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 480.243922][T11554] Call Trace: [ 480.243931][T11554] [ 480.243941][T11554] dump_stack_lvl+0xe8/0x150 [ 480.243970][T11554] should_fail_ex+0x467/0x600 [ 480.244001][T11554] should_failslab+0xa8/0x100 [ 480.244027][T11554] __kmalloc_noprof+0xdf/0x7a0 [ 480.244050][T11554] ? kfree+0x4d/0x6c0 [ 480.244081][T11554] ? get_pid_task+0x20/0x1f0 [ 480.244098][T11554] ? tomoyo_realpath_from_path+0xef/0x640 [ 480.244128][T11554] tomoyo_realpath_from_path+0xef/0x640 [ 480.244153][T11554] ? lock_release+0x4b/0x3c0 [ 480.244179][T11554] ? tomoyo_path_number_perm+0x219/0x5f0 [ 480.244211][T11554] tomoyo_path_number_perm+0x246/0x5f0 [ 480.244242][T11554] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 480.244265][T11554] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 480.244296][T11554] ? do_raw_spin_lock+0x12b/0x2f0 [ 480.244318][T11554] ? rcu_is_watching+0x15/0xb0 [ 480.244348][T11554] ? rcu_is_watching+0x15/0xb0 [ 480.244375][T11554] ? trace_irq_enable+0x3b/0x140 [ 480.244408][T11554] ? hook_file_ioctl+0x1f3/0x5d0 [ 480.244444][T11554] ? lock_release+0x4b/0x3c0 [ 480.244471][T11554] ? __fget_files+0x2a/0x420 [ 480.244500][T11554] ? __fget_files+0x3a8/0x420 [ 480.244528][T11554] ? __fget_files+0x2a/0x420 [ 480.244560][T11554] security_file_ioctl+0xc3/0x2a0 [ 480.244593][T11554] __se_sys_ioctl+0x47/0x170 [ 480.244616][T11554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.244640][T11554] do_syscall_64+0x174/0x580 [ 480.244670][T11554] ? trace_irq_disable+0x3b/0x140 [ 480.244690][T11554] ? clear_bhb_loop+0x40/0x90 [ 480.244716][T11554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.244737][T11554] RIP: 0033:0x7f307ed1ce59 [ 480.244758][T11554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.244778][T11554] RSP: 002b:00007f307cf4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.244802][T11554] RAX: ffffffffffffffda RBX: 00007f307ef96090 RCX: 00007f307ed1ce59 [ 480.244829][T11554] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 480.244843][T11554] RBP: 00007f307cf4d090 R08: 0000000000000000 R09: 0000000000000000 [ 480.244858][T11554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.244872][T11554] R13: 00007f307ef96128 R14: 00007f307ef96090 R15: 00007ffc9845dbf8 [ 480.244893][T11554] [ 480.244943][T11554] ERROR: Out of memory at tomoyo_realpath_from_path. [ 480.258107][ T5803] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 480.297334][T11557] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 480.297361][T11557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.549084][ T5803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 480.549117][ T5803] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 480.549142][ T5803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 57664, setting to 1024 [ 480.549169][ T5803] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 480.549205][ T5803] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 480.549229][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.321400][ T5803] usb 2-1: config 0 descriptor?? [ 481.322183][T11543] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 481.445397][T11568] dummy0: entered allmulticast mode [ 481.447207][T11568] dummy0: left allmulticast mode [ 481.525106][ T5803] hdpvr 2-1:0.0: firmware version 0xd9 dated LW@'^R"5DBUN=rp]E/ [ 481.525131][ T5803] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 481.756002][ T4923] Bluetooth: hci2: unexpected event for opcode 0x100c [ 481.818098][ T9] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 481.848139][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 481.979835][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.979869][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.979910][ T9] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 481.979933][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.984630][ T9] usb 3-1: config 0 descriptor?? [ 481.999721][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.999749][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 482.000992][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 482.001059][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 482.001079][ T10] usb 5-1: SerialNumber: syz [ 482.086689][ T5803] hdpvr 2-1:0.0: max device number reached, device register failed [ 482.088177][ T5701] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 482.118232][ T5803] usb 2-1: USB disconnect, device number 67 [ 482.154164][T11588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1738'. [ 482.223526][ T10] usb 5-1: 0:2 : does not exist [ 482.238118][ T5701] usb 6-1: Using ep0 maxpacket: 32 [ 482.240632][ T5701] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 482.240663][ T5701] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 482.240684][ T5701] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 482.240707][ T5701] usb 6-1: config 1 has no interface number 0 [ 482.240788][ T5701] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 482.240816][ T5701] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 482.240848][ T5701] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 482.240863][ T5701] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.263307][ T5701] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 482.276176][ T10] usb 5-1: USB disconnect, device number 53 [ 482.319863][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 482.475622][ T5701] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 483.549561][ T5701] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 484.164078][ T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 485.668127][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 485.668164][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.981360][ T10] usb 5-1: config 0 descriptor?? [ 486.298170][ T10] cp210x 5-1:0.0: cp210x converter detected [ 487.118159][ T9] usb 3-1: string descriptor 0 read error: -71 [ 487.123270][ T9] uclogic 0003:256C:006D.0022: failed retrieving string descriptor #200: -71 [ 487.123964][ T9] uclogic 0003:256C:006D.0022: failed retrieving pen parameters: -71 [ 487.124122][ T9] uclogic 0003:256C:006D.0022: failed probing pen v2 parameters: -71 [ 487.125959][ T9] uclogic 0003:256C:006D.0022: failed probing parameters: -71 [ 487.318850][ T9] uclogic 0003:256C:006D.0022: probe with driver uclogic failed with error -71 [ 487.382900][ T9] usb 3-1: USB disconnect, device number 64 [ 487.531223][ T10] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 487.531365][ T10] cp210x 5-1:0.0: querying part number failed [ 487.556606][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 487.586136][ T10] usb 5-1: USB disconnect, device number 54 [ 487.606338][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 487.606943][ T10] cp210x 5-1:0.0: device disconnected [ 487.720860][ T5594] usb 6-1: USB disconnect, device number 42 [ 487.721717][ T5594] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 487.852993][ T5701] IPVS: starting estimator thread 0... [ 487.918394][ T5803] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 487.926557][T11644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1749'. [ 487.944782][T11639] IPVS: using max 17 ests per chain, 40800 per kthread [ 488.070371][ T5803] usb 2-1: not running at top speed; connect to a high speed hub [ 488.071318][ T5803] usb 2-1: config 1 interface 0 has no altsetting 0 [ 488.106797][ T5803] usb 2-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.40 [ 488.106831][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.106852][ T5803] usb 2-1: Product: syz [ 488.106866][ T5803] usb 2-1: Manufacturer: ࠐ [ 488.106877][ T5803] usb 2-1: SerialNumber: syz [ 488.358905][T11634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.364995][T11653] FAULT_INJECTION: forcing a failure. [ 488.364995][T11653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.365036][T11653] CPU: 0 UID: 0 PID: 11653 Comm: syz.5.1753 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 488.365067][T11653] Tainted: [L]=SOFTLOCKUP [ 488.365075][T11653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 488.365088][T11653] Call Trace: [ 488.365096][T11653] [ 488.365105][T11653] dump_stack_lvl+0xe8/0x150 [ 488.365136][T11653] should_fail_ex+0x467/0x600 [ 488.365166][T11653] _copy_from_iter+0x1d3/0x1660 [ 488.365259][T11634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.365271][T11653] ? rcu_is_watching+0x15/0xb0 [ 488.365300][T11653] ? trace_kmem_cache_alloc+0x29/0xe0 [ 488.365322][T11653] ? __pfx__copy_from_iter+0x10/0x10 [ 488.365348][T11653] ? kmem_cache_alloc_node_noprof+0x278/0x710 [ 488.365368][T11653] ? __alloc_skb+0x276/0x7a0 [ 488.365398][T11653] ? __alloc_skb+0x4cc/0x7a0 [ 488.365422][T11653] ? skb_put+0x112/0x210 [ 488.365447][T11653] pfkey_sendmsg+0x25f/0x11d0 [ 488.365509][T11653] ? rcu_is_watching+0x15/0xb0 [ 488.365537][T11653] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 488.365567][T11653] ? rcu_is_watching+0x15/0xb0 [ 488.365593][T11653] ? lock_release+0x4b/0x3c0 [ 488.365615][T11653] ? lock_release+0x4b/0x3c0 [ 488.365640][T11653] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 488.365667][T11653] ? kernel_text_address+0xa5/0xe0 [ 488.365694][T11653] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 488.365715][T11653] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 488.365745][T11653] ____sys_sendmsg+0x9a2/0xa10 [ 488.365775][T11653] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.365807][T11653] ? import_iovec+0x73/0xa0 [ 488.365837][T11653] ___sys_sendmsg+0x2a5/0x360 [ 488.365864][T11653] ? get_pid_task+0x20/0x1f0 [ 488.365882][T11653] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.365920][T11653] ? __fget_files+0x2a/0x420 [ 488.365944][T11653] ? __fget_files+0x3a8/0x420 [ 488.365977][T11653] __x64_sys_sendmsg+0x1c3/0x2a0 [ 488.366003][T11653] ? lock_release+0x4b/0x3c0 [ 488.366024][T11653] ? fdget_pos+0x252/0x320 [ 488.366051][T11653] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 488.366082][T11653] ? __pfx_ksys_write+0x10/0x10 [ 488.366106][T11653] ? rcu_is_watching+0x15/0xb0 [ 488.366132][T11653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.366153][T11653] do_syscall_64+0x174/0x580 [ 488.366180][T11653] ? trace_irq_disable+0x3b/0x140 [ 488.366202][T11653] ? clear_bhb_loop+0x40/0x90 [ 488.366225][T11653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.366245][T11653] RIP: 0033:0x7f37b097ce59 [ 488.366273][T11653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.366290][T11653] RSP: 002b:00007f37aebd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.366315][T11653] RAX: ffffffffffffffda RBX: 00007f37b0bf5fa0 RCX: 00007f37b097ce59 [ 488.366332][T11653] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 488.366346][T11653] RBP: 00007f37aebd6090 R08: 0000000000000000 R09: 0000000000000000 [ 488.366360][T11653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.366374][T11653] R13: 00007f37b0bf6038 R14: 00007f37b0bf5fa0 R15: 00007ffdf407f258 [ 488.366398][T11653] [ 488.470048][ T5803] usbhid 2-1:1.0: can't add hid device: -71 [ 488.470130][ T5803] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 488.488371][ T5803] usb 2-1: USB disconnect, device number 68 [ 489.776793][T11677] FAULT_INJECTION: forcing a failure. [ 489.776793][T11677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.776853][T11677] CPU: 1 UID: 0 PID: 11677 Comm: syz.5.1756 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 489.776894][T11677] Tainted: [L]=SOFTLOCKUP [ 489.776902][T11677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 489.776915][T11677] Call Trace: [ 489.776923][T11677] [ 489.776933][T11677] dump_stack_lvl+0xe8/0x150 [ 489.776962][T11677] should_fail_ex+0x467/0x600 [ 489.776991][T11677] strncpy_from_user+0x36/0x2c0 [ 489.777084][T11677] do_getname+0x77/0x250 [ 489.777113][T11677] do_sys_openat2+0xcc/0x200 [ 489.777171][T11677] ? __pfx_do_sys_openat2+0x10/0x10 [ 489.777203][T11677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.777227][T11677] __x64_sys_openat+0x138/0x170 [ 489.777257][T11677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.777277][T11677] do_syscall_64+0x174/0x580 [ 489.777305][T11677] ? trace_irq_disable+0x3b/0x140 [ 489.777328][T11677] ? clear_bhb_loop+0x40/0x90 [ 489.777352][T11677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.777372][T11677] RIP: 0033:0x7f37b093d68e [ 489.777392][T11677] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 489.777411][T11677] RSP: 002b:00007f37aeb93b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 489.777436][T11677] RAX: ffffffffffffffda RBX: 00007f37aeb946c0 RCX: 00007f37b093d68e [ 489.777453][T11677] RDX: 0000000000000000 RSI: 00007f37aeb93c00 RDI: ffffffffffffff9c [ 489.777469][T11677] RBP: 00007f37aeb93c00 R08: 0000000000000000 R09: 0000000000000000 [ 489.777484][T11677] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 489.777499][T11677] R13: 00007f37b0bf6218 R14: 00007f37b0bf6180 R15: 00007ffdf407f258 [ 489.777523][T11677] [ 490.408646][ T5701] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 490.612344][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 490.612417][ T5701] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 490.612457][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 57664, setting to 1024 [ 490.612495][ T5701] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 490.612573][ T5701] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 490.612633][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.651022][ T5701] usb 5-1: config 0 descriptor?? [ 490.655936][T11666] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 490.808884][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1761'. [ 490.922148][ T5701] hdpvr 5-1:0.0: firmware version 0xd9 dated LW@'^R"5DBUN=rp]E/ [ 490.922182][ T5701] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 491.178157][ T822] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 491.349350][ T822] usb 6-1: Using ep0 maxpacket: 32 [ 491.376646][ T822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.376682][ T822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.376766][ T822] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 491.376790][ T822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.382739][ T822] usb 6-1: config 0 descriptor?? [ 491.609359][ T5701] hdpvr 5-1:0.0: max device number reached, device register failed [ 491.649575][ T5701] usb 5-1: USB disconnect, device number 55 [ 492.006225][ T822] ft260 0003:0403:6030.0023: failed to retrieve chip version [ 492.006464][ T822] ft260 0003:0403:6030.0023: probe with driver ft260 failed with error -71 [ 492.025325][ T822] usb 6-1: USB disconnect, device number 43 [ 492.813116][ T10] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 492.933899][T11709] FAULT_INJECTION: forcing a failure. [ 492.933899][T11709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.933939][T11709] CPU: 0 UID: 0 PID: 11709 Comm: syz.5.1772 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 492.933969][T11709] Tainted: [L]=SOFTLOCKUP [ 492.933977][T11709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 492.933990][T11709] Call Trace: [ 492.933997][T11709] [ 492.934006][T11709] dump_stack_lvl+0xe8/0x150 [ 492.934036][T11709] should_fail_ex+0x467/0x600 [ 492.934063][T11709] _copy_to_user+0x31/0xb0 [ 492.934085][T11709] simple_read_from_buffer+0xe1/0x170 [ 492.934116][T11709] proc_fail_nth_read+0x1be/0x230 [ 492.934139][T11709] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 492.934162][T11709] ? rw_verify_area+0x250/0x4d0 [ 492.934183][T11709] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 492.934207][T11709] vfs_read+0x219/0xa90 [ 492.934224][T11709] ? __might_fault+0xaf/0x130 [ 492.934248][T11709] ? bpf_lsm_bpf+0x9/0x20 [ 492.934269][T11709] ? security_bpf+0x7e/0x2d0 [ 492.934366][T11709] ? __pfx_vfs_read+0x10/0x10 [ 492.934385][T11709] ? __sys_bpf+0x66e/0x950 [ 492.934407][T11709] ? __pfx___sys_bpf+0x10/0x10 [ 492.934427][T11709] ? kmem_cache_free+0x187/0x6c0 [ 492.934456][T11709] ksys_read+0x156/0x270 [ 492.934479][T11709] ? __pfx_ksys_read+0x10/0x10 [ 492.934501][T11709] ? rcu_is_watching+0x15/0xb0 [ 492.934530][T11709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.934553][T11709] do_syscall_64+0x174/0x580 [ 492.934579][T11709] ? trace_irq_disable+0x3b/0x140 [ 492.934600][T11709] ? clear_bhb_loop+0x40/0x90 [ 492.934623][T11709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.934644][T11709] RIP: 0033:0x7f37b093d68e [ 492.934663][T11709] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 492.934683][T11709] RSP: 002b:00007f37aebd5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 492.934708][T11709] RAX: ffffffffffffffda RBX: 00007f37aebd66c0 RCX: 00007f37b093d68e [ 492.934725][T11709] RDX: 000000000000000f RSI: 00007f37aebd60a0 RDI: 0000000000000003 [ 492.934739][T11709] RBP: 00007f37aebd6090 R08: 0000000000000000 R09: 0000000000000000 [ 492.934753][T11709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.934766][T11709] R13: 00007f37b0bf6038 R14: 00007f37b0bf5fa0 R15: 00007ffdf407f258 [ 492.934789][T11709] [ 492.968038][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 492.971909][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 492.972701][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 492.972735][ T10] usb 2-1: can't read configurations, error -71 [ 493.168086][ T5594] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 493.319988][ T5594] usb 5-1: config 0 has an invalid interface number: 158 but max is 0 [ 493.320021][ T5594] usb 5-1: config 0 has no interface number 0 [ 493.320048][ T5594] usb 5-1: too many endpoints for config 0 interface 158 altsetting 52: 72, using maximum allowed: 30 [ 493.320083][ T5594] usb 5-1: config 0 interface 158 altsetting 52 has 0 endpoint descriptors, different from the interface descriptor's value: 72 [ 493.320103][ T5594] usb 5-1: config 0 interface 158 has no altsetting 0 [ 493.321998][ T5594] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 493.322028][ T5594] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.322049][ T5594] usb 5-1: Product: syz [ 493.322063][ T5594] usb 5-1: Manufacturer: syz [ 493.322078][ T5594] usb 5-1: SerialNumber: syz [ 493.324900][ T5594] usb 5-1: config 0 descriptor?? [ 493.472808][ T4923] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 493.472880][ T4923] CPU: 1 UID: 0 PID: 4923 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 493.472913][ T4923] Tainted: [L]=SOFTLOCKUP [ 493.472921][ T4923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 493.472936][ T4923] Workqueue: hci2 hci_rx_work [ 493.472972][ T4923] Call Trace: [ 493.472985][ T4923] [ 493.472995][ T4923] dump_stack_lvl+0xe8/0x150 [ 493.473023][ T4923] sysfs_create_dir_ns+0x271/0x2a0 [ 493.473054][ T4923] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 493.473078][ T4923] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 493.473109][ T4923] ? rt_spin_unlock+0x160/0x200 [ 493.473131][ T4923] kobject_add_internal+0x62c/0xce0 [ 493.473155][ T4923] kobject_add+0x163/0x240 [ 493.473186][ T4923] ? __pfx_kobject_add+0x10/0x10 [ 493.473217][ T4923] ? get_device_parent+0x370/0x3a0 [ 493.473247][ T4923] device_add+0x3fa/0xb80 [ 493.473275][ T4923] hci_conn_add_sysfs+0xd5/0x210 [ 493.473302][ T4923] le_conn_complete_evt+0xfef/0x1580 [ 493.473327][ T4923] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 493.473349][ T4923] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 493.473373][ T4923] ? rt_mutex_slowunlock+0x219/0x460 [ 493.473394][ T4923] ? skb_pull_data+0xf0/0x200 [ 493.473425][ T4923] hci_le_conn_complete_evt+0x187/0x470 [ 493.473461][ T4923] hci_event_packet+0x67a/0xf10 [ 493.473485][ T4923] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 493.473513][ T4923] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 493.473540][ T4923] ? __pfx_hci_event_packet+0x10/0x10 [ 493.473566][ T4923] ? do_raw_spin_lock+0x12b/0x2f0 [ 493.473590][ T4923] ? hci_send_to_monitor+0xe2/0x590 [ 493.473613][ T4923] hci_rx_work+0x3ee/0x1020 [ 493.473643][ T4923] ? process_scheduled_works+0xa20/0x14e0 [ 493.473670][ T4923] process_scheduled_works+0xa8e/0x14e0 [ 493.473711][ T4923] ? __pfx_process_scheduled_works+0x10/0x10 [ 493.473737][ T4923] ? do_raw_spin_lock+0x12b/0x2f0 [ 493.473758][ T4923] ? assign_work+0x3cf/0x5d0 [ 493.473784][ T4923] worker_thread+0xa47/0xfb0 [ 493.473821][ T4923] kthread+0x388/0x470 [ 493.473841][ T4923] ? __pfx_worker_thread+0x10/0x10 [ 493.473867][ T4923] ? __pfx_kthread+0x10/0x10 [ 493.473887][ T4923] ret_from_fork+0x514/0xb70 [ 493.473912][ T4923] ? __pfx_ret_from_fork+0x10/0x10 [ 493.473932][ T4923] ? __switch_to+0xc89/0x1420 [ 493.473962][ T4923] ? __pfx_kthread+0x10/0x10 [ 493.473984][ T4923] ret_from_fork_asm+0x1a/0x30 [ 493.474017][ T4923] [ 493.474105][ T4923] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 493.474139][ T4923] Bluetooth: hci2: failed to register connection device [ 493.777396][ T5594] usb 5-1: USB disconnect, device number 56 [ 494.014610][ T4923] Bluetooth: hci0: unexpected event 0x3e length: 317 > 260 [ 494.014638][ T4923] Bluetooth: hci0: unexpected subevent 0x0d length: 316 > 260 [ 494.621055][ T36] kauditd_printk_skb: 83 callbacks suppressed [ 494.621123][ T36] audit: type=1326 audit(1781581807.906:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11728 comm="syz.1.1779" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc14ace59 code=0x7ffc0000 [ 494.757730][ T36] audit: type=1326 audit(1781581807.916:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11728 comm="syz.1.1779" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc14ace59 code=0x7ffc0000 [ 494.819388][ T36] audit: type=1326 audit(1781581807.946:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11728 comm="syz.1.1779" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cc146d68e code=0x7ffc0000 [ 495.432651][ T36] audit: type=1326 audit(1781581807.956:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11728 comm="syz.1.1779" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cc146d68e code=0x7ffc0000 [ 495.432704][ T36] audit: type=1326 audit(1781581807.966:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11728 comm="syz.1.1779" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cc146d68e code=0x7ffc0000 [ 495.432741][ T36] audit: type=1326 audit(1781581807.966:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11728 comm="syz.1.1779" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cc146d68e code=0x7ffc0000 [ 495.432778][ T36] audit: type=1326 audit(1781581807.976:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11728 comm="syz.1.1779" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cc146d68e code=0x7ffc0000 [ 495.432814][ T36] audit: type=1326 audit(1781581807.976:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11728 comm="syz.1.1779" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cc146d68e code=0x7ffc0000 [ 495.432850][ T36] audit: type=1326 audit(1781581807.986:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11728 comm="syz.1.1779" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cc146d68e code=0x7ffc0000 [ 495.432888][ T36] audit: type=1326 audit(1781581807.996:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11728 comm="syz.1.1779" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cc146d68e code=0x7ffc0000 [ 495.591975][T11738] loop8: detected capacity change from 0 to 7 [ 495.595814][T11738] Dev loop8: unable to read RDB block 7 [ 495.595864][T11738] loop8: unable to read partition table [ 495.595988][T11738] loop8: partition table beyond EOD, truncated [ 495.596012][T11738] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 495.629680][T11723] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.634039][T11723] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.008175][T11012] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 496.159647][T11012] usb 2-1: not running at top speed; connect to a high speed hub [ 496.160662][T11012] usb 2-1: config 1 interface 0 has no altsetting 0 [ 496.162590][T11012] usb 2-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.40 [ 496.162620][T11012] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.162641][T11012] usb 2-1: Product: syz [ 496.162656][T11012] usb 2-1: Manufacturer: ࠐ [ 496.162670][T11012] usb 2-1: SerialNumber: syz [ 496.363327][T11723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.369595][T11723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.371587][T11745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.372863][T11745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.397776][T11012] usbhid 2-1:1.0: can't add hid device: -71 [ 496.397861][T11012] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 496.404738][T11012] usb 2-1: USB disconnect, device number 71 [ 496.800694][ T4923] Bluetooth: hci5: unexpected event 0x3e length: 317 > 260 [ 496.800713][ T4923] Bluetooth: hci5: unexpected subevent 0x0d length: 316 > 260 [ 497.248130][ T10] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 497.364968][ T6244] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.409700][ T10] usb 2-1: config 0 has an invalid interface number: 158 but max is 0 [ 497.409732][ T10] usb 2-1: config 0 has no interface number 0 [ 497.409761][ T10] usb 2-1: too many endpoints for config 0 interface 158 altsetting 52: 72, using maximum allowed: 30 [ 497.409798][ T10] usb 2-1: config 0 interface 158 altsetting 52 has 0 endpoint descriptors, different from the interface descriptor's value: 72 [ 497.409828][ T10] usb 2-1: config 0 interface 158 has no altsetting 0 [ 497.411825][ T10] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 497.411855][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.411876][ T10] usb 2-1: Product: syz [ 497.411891][ T10] usb 2-1: Manufacturer: syz [ 497.411907][ T10] usb 2-1: SerialNumber: syz [ 497.416414][ T10] usb 2-1: config 0 descriptor?? [ 497.578466][ T6244] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.578575][ T6244] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.578609][ T6244] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.597821][T11779] FAULT_INJECTION: forcing a failure. [ 497.597821][T11779] name failslab, interval 1, probability 0, space 0, times 0 [ 497.597849][T11779] CPU: 0 UID: 0 PID: 11779 Comm: syz.2.1796 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 497.597880][T11779] Tainted: [L]=SOFTLOCKUP [ 497.597888][T11779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 497.597901][T11779] Call Trace: [ 497.597908][T11779] [ 497.597918][T11779] dump_stack_lvl+0xe8/0x150 [ 497.597947][T11779] should_fail_ex+0x467/0x600 [ 497.597965][T11779] should_failslab+0xa8/0x100 [ 497.597992][T11779] __kmalloc_cache_noprof+0x84/0x690 [ 497.598013][T11779] ? lock_release+0x4b/0x3c0 [ 497.598035][T11779] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 497.598134][T11779] tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 497.598166][T11779] tcp_sendmsg_locked+0x4ce2/0x55c0 [ 497.598197][T11779] ? tcp_sendmsg_locked+0x5b1/0x55c0 [ 497.598224][T11779] ? lock_acquire+0x5f/0x350 [ 497.598238][T11779] ? do_raw_spin_lock+0x12b/0x2f0 [ 497.598249][T11779] ? rcu_is_watching+0x15/0xb0 [ 497.598265][T11779] ? rcu_is_watching+0x15/0xb0 [ 497.598280][T11779] ? rcu_is_watching+0x15/0xb0 [ 497.598295][T11779] ? trace_irq_enable+0x3b/0x140 [ 497.598316][T11779] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 497.598332][T11779] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 497.598345][T11779] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 497.598362][T11779] ? lock_release+0x4b/0x3c0 [ 497.598376][T11779] ? trace_irq_enable+0x3b/0x140 [ 497.598388][T11779] ? __pfx_inet_sendmsg+0x10/0x10 [ 497.598442][T11779] tcp_sendmsg+0x2f/0x50 [ 497.598453][T11779] __sys_sendto+0x5f1/0x710 [ 497.598470][T11779] ? __pfx___sys_sendto+0x10/0x10 [ 497.598490][T11779] ? ksys_write+0x248/0x270 [ 497.598503][T11779] ? __pfx_ksys_write+0x10/0x10 [ 497.598516][T11779] __x64_sys_sendto+0xde/0x100 [ 497.598531][T11779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.598543][T11779] do_syscall_64+0x174/0x580 [ 497.598558][T11779] ? trace_irq_disable+0x3b/0x140 [ 497.598570][T11779] ? clear_bhb_loop+0x40/0x90 [ 497.598583][T11779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.598597][T11779] RIP: 0033:0x7f307ed1ce59 [ 497.598615][T11779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.598634][T11779] RSP: 002b:00007f307cf4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 497.598658][T11779] RAX: ffffffffffffffda RBX: 00007f307ef96090 RCX: 00007f307ed1ce59 [ 497.598674][T11779] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 497.598684][T11779] RBP: 00007f307cf4d090 R08: 0000200000000100 R09: 0000000000000010 [ 497.598693][T11779] R10: 0000000020008005 R11: 0000000000000246 R12: 0000000000000001 [ 497.598701][T11779] R13: 00007f307ef96128 R14: 00007f307ef96090 R15: 00007ffc9845dbf8 [ 497.598714][T11779] [ 497.664300][T11773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.664593][T11773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.888304][T11012] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 497.929069][ T10] usb 2-1: USB disconnect, device number 72 [ 498.048174][T11012] usb 5-1: Using ep0 maxpacket: 16 [ 498.049937][T11012] usb 5-1: unable to get BOS descriptor or descriptor too short [ 498.050880][T11012] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.050947][T11012] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 498.053283][T11012] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 498.053314][T11012] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.053337][T11012] usb 5-1: Product: syz [ 498.053352][T11012] usb 5-1: Manufacturer: syz [ 498.053367][T11012] usb 5-1: SerialNumber: syz [ 498.088453][ T5803] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 498.248239][ T5803] usb 6-1: Using ep0 maxpacket: 16 [ 498.250557][ T5803] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 498.253590][ T5803] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 498.253609][ T5803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.253621][ T5803] usb 6-1: Product: syz [ 498.253630][ T5803] usb 6-1: Manufacturer: syz [ 498.253638][ T5803] usb 6-1: SerialNumber: syz [ 498.261242][ T5803] usb 6-1: config 0 descriptor?? [ 498.274228][ T5803] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 498.281656][ T5803] usb 6-1: Detected FT232B [ 498.314007][T11012] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 498.314940][T11012] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 498.524617][ T5803] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 498.525697][ T5803] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 498.531623][ T5803] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 498.540849][ T5803] usb 6-1: USB disconnect, device number 44 [ 498.554008][ T5803] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 498.555434][ T5803] ftdi_sio 6-1:0.0: device disconnected [ 498.630702][ T822] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 498.982511][T11781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.982802][T11781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.072765][T11012] usb 5-1: USB disconnect, device number 57 [ 499.100770][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.128066][ T822] usb 2-1: Using ep0 maxpacket: 32 [ 499.130642][ T822] usb 2-1: unable to get BOS descriptor or descriptor too short [ 499.132039][ T822] usb 2-1: config 7 has an invalid interface number: 223 but max is 0 [ 499.132067][ T822] usb 2-1: config 7 has no interface number 0 [ 499.132102][ T822] usb 2-1: config 7 interface 223 altsetting 177 endpoint 0xF has invalid wMaxPacketSize 0 [ 499.132128][ T822] usb 2-1: config 7 interface 223 altsetting 177 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 499.132158][ T822] usb 2-1: config 7 interface 223 has no altsetting 0 [ 499.134550][ T822] usb 2-1: New USB device found, idVendor=185b, idProduct=2870, bcdDevice=af.8a [ 499.134580][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.134600][ T822] usb 2-1: Product: ᐉ [ 499.134615][ T822] usb 2-1: Manufacturer: 閉腦䕌槨딪厬௡牸䛹겑훮ꄛ⟩ [ 499.134641][ T822] usb 2-1: SerialNumber: 땴陮爐摐᫖﷚ᰒ瀙ଋⰝᾍ覾훭箉㬨헁ⶆ是冊篘艿䜜唁냸梈獉沸캿ﴵ営㑠⣤ج㽼贈䯂嘀븑欉㨞汖刱檋祜ఈ↚쁫ᢐꚧ蓣饊瓯⮣엡銬ኘ傚乭춹☻ᠼ㱵撧虎伄︻꓿童깕䮆릐鱌ᄀ垜帡忩퐩댢 [ 499.568963][T11823] ipip0: entered allmulticast mode [ 499.628290][ T7341] Bluetooth: hci2: command 0x0406 tx timeout [ 499.638294][T11012] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 499.738128][ T5716] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 499.777034][ T822] usb 2-1: USB disconnect, device number 73 [ 499.788625][T11012] usb 3-1: Using ep0 maxpacket: 16 [ 499.791205][T11012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.791244][T11012] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 499.791284][T11012] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 499.791308][T11012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.794082][T11012] usb 3-1: config 0 descriptor?? [ 499.918335][ T5803] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 499.936780][ T5716] usb 6-1: config 0 has an invalid interface number: 158 but max is 0 [ 499.936811][ T5716] usb 6-1: config 0 has no interface number 0 [ 499.936839][ T5716] usb 6-1: too many endpoints for config 0 interface 158 altsetting 52: 72, using maximum allowed: 30 [ 499.936878][ T5716] usb 6-1: config 0 interface 158 altsetting 52 has 0 endpoint descriptors, different from the interface descriptor's value: 72 [ 499.936906][ T5716] usb 6-1: config 0 interface 158 has no altsetting 0 [ 499.940144][ T5716] usb 6-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 499.940174][ T5716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.940215][ T5716] usb 6-1: Product: syz [ 499.940230][ T5716] usb 6-1: Manufacturer: syz [ 499.940244][ T5716] usb 6-1: SerialNumber: syz [ 499.942834][ T5716] usb 6-1: config 0 descriptor?? [ 500.069220][ T5803] usb 5-1: Using ep0 maxpacket: 16 [ 500.071114][ T5803] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.071141][ T5803] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 500.073932][ T5803] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 500.073963][ T5803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.073983][ T5803] usb 5-1: Product: syz [ 500.074078][ T5803] usb 5-1: Manufacturer: syz [ 500.074093][ T5803] usb 5-1: SerialNumber: syz [ 500.136941][ T5803] usb 5-1: 0:2 : does not exist [ 500.177262][T11820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.177730][T11820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.212594][T11012] HID 045e:07da: Invalid code 65791 type 1 [ 500.228748][T11012] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0024/input/input14 [ 500.246602][ T5716] usb 6-1: USB disconnect, device number 45 [ 500.253852][ T6039] udevd[6039]: setting mode of /dev/bus/usb/006/045 to 020664 failed: No such file or directory [ 500.254334][ T6039] udevd[6039]: setting owner of /dev/bus/usb/006/045 to uid=0, gid=0 failed: No such file or directory [ 500.289542][T11012] microsoft 0003:045E:07DA.0024: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 500.296433][ T5803] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 500.366650][ T5803] usb 5-1: USB disconnect, device number 58 [ 500.438649][T11831] netlink: 'syz.0.1818': attribute type 21 has an invalid length. [ 500.438726][T11831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1818'. [ 500.440344][T11831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1818'. [ 500.441219][T11831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1818'. [ 500.490205][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 500.638980][T11818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.639501][T11818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.642812][T11818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.643280][T11818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.766942][T11838] FAULT_INJECTION: forcing a failure. [ 500.766942][T11838] name failslab, interval 1, probability 0, space 0, times 0 [ 500.766981][T11838] CPU: 0 UID: 0 PID: 11838 Comm: syz.1.1821 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 500.767011][T11838] Tainted: [L]=SOFTLOCKUP [ 500.767019][T11838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 500.767036][T11838] Call Trace: [ 500.767045][T11838] [ 500.767055][T11838] dump_stack_lvl+0xe8/0x150 [ 500.767083][T11838] should_fail_ex+0x467/0x600 [ 500.767112][T11838] should_failslab+0xa8/0x100 [ 500.767137][T11838] kmem_cache_alloc_node_noprof+0x8f/0x710 [ 500.767161][T11838] ? __alloc_skb+0x1d7/0x7a0 [ 500.767189][T11838] __alloc_skb+0x1d7/0x7a0 [ 500.767216][T11838] netlink_sendmsg+0x5d4/0xb40 [ 500.767360][T11838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.767391][T11838] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 500.767411][T11838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.767439][T11838] ____sys_sendmsg+0x9a2/0xa10 [ 500.767472][T11838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 500.767506][T11838] ? import_iovec+0x73/0xa0 [ 500.767538][T11838] ___sys_sendmsg+0x2a5/0x360 [ 500.767567][T11838] ? get_pid_task+0x20/0x1f0 [ 500.767589][T11838] ? __pfx____sys_sendmsg+0x10/0x10 [ 500.767634][T11838] ? __fget_files+0x2a/0x420 [ 500.767662][T11838] ? __fget_files+0x3a8/0x420 [ 500.767706][T11838] __x64_sys_sendmsg+0x1c3/0x2a0 [ 500.767735][T11838] ? lock_release+0x4b/0x3c0 [ 500.767757][T11838] ? fdget_pos+0x252/0x320 [ 500.767785][T11838] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 500.767818][T11838] ? __pfx_ksys_write+0x10/0x10 [ 500.767842][T11838] ? rcu_is_watching+0x15/0xb0 [ 500.767871][T11838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.767893][T11838] do_syscall_64+0x174/0x580 [ 500.767921][T11838] ? trace_irq_disable+0x3b/0x140 [ 500.767943][T11838] ? clear_bhb_loop+0x40/0x90 [ 500.767967][T11838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.767985][T11838] RIP: 0033:0x7f0cc14ace59 [ 500.768003][T11838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.768021][T11838] RSP: 002b:00007f0cbf706028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.768045][T11838] RAX: ffffffffffffffda RBX: 00007f0cc1725fa0 RCX: 00007f0cc14ace59 [ 500.768061][T11838] RDX: 0000000000040000 RSI: 0000200000001ac0 RDI: 0000000000000005 [ 500.768075][T11838] RBP: 00007f0cbf706090 R08: 0000000000000000 R09: 0000000000000000 [ 500.768088][T11838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.768100][T11838] R13: 00007f0cc1726038 R14: 00007f0cc1725fa0 R15: 00007ffee3912a18 [ 500.768123][T11838] [ 501.398102][ T5716] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 501.468428][T11856] loop8: detected capacity change from 0 to 7 [ 501.469855][T11856] Dev loop8: unable to read RDB block 7 [ 501.469887][T11856] loop8: unable to read partition table [ 501.470301][T11856] loop8: partition table beyond EOD, truncated [ 501.470315][T11856] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 501.560833][ T5716] usb 6-1: not running at top speed; connect to a high speed hub [ 501.561996][ T5716] usb 6-1: config 1 interface 0 has no altsetting 0 [ 501.563938][ T5716] usb 6-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.40 [ 501.563968][ T5716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.563991][ T5716] usb 6-1: Product: syz [ 501.564058][ T5716] usb 6-1: Manufacturer: ࠐ [ 501.564074][ T5716] usb 6-1: SerialNumber: syz [ 502.341982][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.342046][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.355162][ T4923] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 502.355193][ T4923] CPU: 1 UID: 0 PID: 4923 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 502.355226][ T4923] Tainted: [L]=SOFTLOCKUP [ 502.355234][ T4923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 502.355249][ T4923] Workqueue: hci5 hci_rx_work [ 502.355285][ T4923] Call Trace: [ 502.355295][ T4923] [ 502.355305][ T4923] dump_stack_lvl+0xe8/0x150 [ 502.355333][ T4923] sysfs_create_dir_ns+0x271/0x2a0 [ 502.355366][ T4923] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 502.355392][ T4923] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 502.355425][ T4923] ? rt_spin_unlock+0x160/0x200 [ 502.355448][ T4923] kobject_add_internal+0x62c/0xce0 [ 502.355472][ T4923] kobject_add+0x163/0x240 [ 502.355504][ T4923] ? __pfx_kobject_add+0x10/0x10 [ 502.355536][ T4923] ? get_device_parent+0x370/0x3a0 [ 502.355568][ T4923] device_add+0x3fa/0xb80 [ 502.355599][ T4923] hci_conn_add_sysfs+0xd5/0x210 [ 502.355628][ T4923] le_conn_complete_evt+0xfef/0x1580 [ 502.355656][ T4923] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 502.355678][ T4923] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 502.355705][ T4923] ? rt_mutex_slowunlock+0x219/0x460 [ 502.355728][ T4923] ? skb_pull_data+0xf0/0x200 [ 502.355769][ T4923] hci_le_conn_complete_evt+0x187/0x470 [ 502.355806][ T4923] hci_event_packet+0x67a/0xf10 [ 502.355833][ T4923] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 502.355861][ T4923] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 502.355890][ T4923] ? __pfx_hci_event_packet+0x10/0x10 [ 502.355919][ T4923] ? do_raw_spin_lock+0x12b/0x2f0 [ 502.355944][ T4923] ? hci_send_to_monitor+0xe2/0x590 [ 502.355968][ T4923] hci_rx_work+0x3ee/0x1020 [ 502.356000][ T4923] ? process_scheduled_works+0xa20/0x14e0 [ 502.356028][ T4923] process_scheduled_works+0xa8e/0x14e0 [ 502.356080][ T4923] ? __pfx_process_scheduled_works+0x10/0x10 [ 502.356107][ T4923] ? do_raw_spin_lock+0x12b/0x2f0 [ 502.356129][ T4923] ? assign_work+0x3cf/0x5d0 [ 502.356159][ T4923] worker_thread+0xa47/0xfb0 [ 502.356201][ T4923] kthread+0x388/0x470 [ 502.356223][ T4923] ? __pfx_worker_thread+0x10/0x10 [ 502.356250][ T4923] ? __pfx_kthread+0x10/0x10 [ 502.356271][ T4923] ret_from_fork+0x514/0xb70 [ 502.356296][ T4923] ? __pfx_ret_from_fork+0x10/0x10 [ 502.356317][ T4923] ? __switch_to+0xc89/0x1420 [ 502.356349][ T4923] ? __pfx_kthread+0x10/0x10 [ 502.356370][ T4923] ret_from_fork_asm+0x1a/0x30 [ 502.356403][ T4923] [ 502.358132][ T4923] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 502.358172][ T4923] Bluetooth: hci5: failed to register connection device [ 502.390198][T11859] fuse: Unknown parameter 'grou00000000000000000000' [ 502.391966][ T5716] usbhid 6-1:1.0: can't add hid device: -71 [ 502.392090][ T5716] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 502.402826][ T5716] usb 6-1: USB disconnect, device number 46 [ 502.430351][ T6039] udevd[6039]: setting owner of /dev/bus/usb/006/046 to uid=0, gid=0 failed: No such file or directory [ 502.682767][ T5803] usb 3-1: USB disconnect, device number 65 [ 502.747627][T11864] FAULT_INJECTION: forcing a failure. [ 502.747627][T11864] name failslab, interval 1, probability 0, space 0, times 0 [ 502.747666][T11864] CPU: 0 UID: 0 PID: 11864 Comm: syz.2.1830 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 502.747696][T11864] Tainted: [L]=SOFTLOCKUP [ 502.747704][T11864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 502.747718][T11864] Call Trace: [ 502.747727][T11864] [ 502.747736][T11864] dump_stack_lvl+0xe8/0x150 [ 502.747765][T11864] should_fail_ex+0x467/0x600 [ 502.747794][T11864] ? __pfx_sock_alloc_inode+0x10/0x10 [ 502.747818][T11864] should_failslab+0xa8/0x100 [ 502.747843][T11864] ? __pfx_sock_alloc_inode+0x10/0x10 [ 502.747864][T11864] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 502.747891][T11864] ? sock_alloc_inode+0x2c/0x1a0 [ 502.747914][T11864] ? __pfx_sock_alloc_inode+0x10/0x10 [ 502.747936][T11864] sock_alloc_inode+0x2c/0x1a0 [ 502.747957][T11864] ? __pfx_sock_alloc_inode+0x10/0x10 [ 502.747977][T11864] alloc_inode+0x6a/0x1b0 [ 502.748004][T11864] __sock_create+0x12d/0x9d0 [ 502.748026][T11864] ? rcu_is_watching+0x15/0xb0 [ 502.748055][T11864] mptcp_subflow_create_socket+0xfd/0x810 [ 502.748153][T11864] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 502.748185][T11864] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 502.748221][T11864] __mptcp_nmpc_sk+0x155/0x790 [ 502.748262][T11864] ? rcu_is_watching+0x15/0xb0 [ 502.748291][T11864] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 502.748310][T11864] ? rcu_is_watching+0x15/0xb0 [ 502.748337][T11864] ? trace_irq_enable+0x3b/0x140 [ 502.748362][T11864] mptcp_listen+0x10d/0x600 [ 502.748394][T11864] __x64_sys_listen+0x1cd/0x240 [ 502.748417][T11864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.748440][T11864] do_syscall_64+0x174/0x580 [ 502.748466][T11864] ? trace_irq_disable+0x3b/0x140 [ 502.748488][T11864] ? clear_bhb_loop+0x40/0x90 [ 502.748512][T11864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.748533][T11864] RIP: 0033:0x7f307ed1ce59 [ 502.748553][T11864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.748572][T11864] RSP: 002b:00007f307cf6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 502.748597][T11864] RAX: ffffffffffffffda RBX: 00007f307ef95fa0 RCX: 00007f307ed1ce59 [ 502.748614][T11864] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: 0000000000000004 [ 502.748628][T11864] RBP: 00007f307cf6e090 R08: 0000000000000000 R09: 0000000000000000 [ 502.748642][T11864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.748656][T11864] R13: 00007f307ef96038 R14: 00007f307ef95fa0 R15: 00007ffc9845dbf8 [ 502.748680][T11864] [ 502.758660][T11864] socket: no more sockets [ 503.106727][ T4923] Bluetooth: hci5: unexpected event for opcode 0x2040 [ 503.116093][ T4923] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 503.405614][T11883] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1835'. [ 504.184518][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1838'. [ 504.519017][ T5803] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 504.739479][ T5803] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.739508][ T5803] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 504.741037][ T5803] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 504.741067][ T5803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 504.741089][ T5803] usb 6-1: SerialNumber: syz [ 504.978194][ T822] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 505.104219][ T5803] usb 6-1: 0:2 : does not exist [ 505.142120][ T822] usb 3-1: No LPM exit latency info found, disabling LPM. [ 505.143722][ T822] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 505.143768][ T822] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 505.185972][T11903] netlink: 'syz.0.1846': attribute type 11 has an invalid length. [ 505.185987][T11903] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.1846'. [ 505.209122][ T5803] usb 6-1: USB disconnect, device number 47 [ 505.288133][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.023244][T11926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1851'. [ 506.444486][T11935] comedi comedi1: 8255: I/O base address not correctly aligned [ 506.898076][ T5594] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 507.050915][ T5594] usb 6-1: not running at top speed; connect to a high speed hub [ 507.052513][ T5594] usb 6-1: config 1 interface 0 has no altsetting 0 [ 507.056595][ T5594] usb 6-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.40 [ 507.056628][ T5594] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.056650][ T5594] usb 6-1: Product: syz [ 507.056665][ T5594] usb 6-1: Manufacturer: ࠐ [ 507.056680][ T5594] usb 6-1: SerialNumber: syz [ 507.138171][ T10] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 507.148240][ T4923] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 507.148279][ T4923] Bluetooth: hci5: Injecting HCI hardware error event [ 507.148402][ T7341] Bluetooth: hci5: hardware error 0x00 [ 507.279300][ T7341] ================================================================== [ 507.279383][ T7341] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x28b/0x2f0 [ 507.279467][ T7341] Read of size 4 at addr ffff8880388b8794 by task kworker/u9:3/7341 [ 507.279530][ T7341] [ 507.279561][ T7341] CPU: 0 UID: 0 PID: 7341 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 507.279618][ T7341] Tainted: [L]=SOFTLOCKUP [ 507.279627][ T7341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 507.279641][ T7341] Workqueue: hci5 hci_error_reset [ 507.279675][ T7341] Call Trace: [ 507.279684][ T7341] [ 507.279694][ T7341] dump_stack_lvl+0xe8/0x150 [ 507.279719][ T7341] print_address_description+0x55/0x1e0 [ 507.279753][ T7341] ? do_raw_spin_lock+0x28b/0x2f0 [ 507.279772][ T7341] print_report+0x58/0x70 [ 507.279793][ T7341] kasan_report+0x117/0x150 [ 507.279846][ T7341] ? do_raw_spin_lock+0x28b/0x2f0 [ 507.279869][ T7341] do_raw_spin_lock+0x28b/0x2f0 [ 507.279889][ T7341] ? rcu_is_watching+0x15/0xb0 [ 507.279918][ T7341] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 507.279937][ T7341] ? lock_acquire+0x5f/0x350 [ 507.279959][ T7341] ? rcu_is_watching+0x15/0xb0 [ 507.279986][ T7341] ? rcu_is_watching+0x15/0xb0 [ 507.280013][ T7341] _raw_spin_lock_irqsave+0x4c/0x60 [ 507.280041][ T7341] rt_spin_lock+0x157/0x400 [ 507.280064][ T7341] ? __pfx_rt_spin_lock+0x10/0x10 [ 507.280087][ T7341] ? __local_bh_disable_ip+0x205/0x420 [ 507.280125][ T7341] ? bt_accept_unlink+0x61/0x2f0 [ 507.280181][ T7341] bt_accept_unlink+0x7d/0x2f0 [ 507.280211][ T7341] ? bt_accept_unlink+0x61/0x2f0 [ 507.280242][ T7341] l2cap_sock_teardown_cb+0x17e/0x490 [ 507.280300][ T7341] l2cap_chan_del+0xb5/0x610 [ 507.280327][ T7341] ? l2cap_conn_del+0x337/0x570 [ 507.280352][ T7341] l2cap_conn_del+0x343/0x570 [ 507.280377][ T7341] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 507.280402][ T7341] hci_conn_hash_flush+0x105/0x260 [ 507.280430][ T7341] hci_dev_close_sync+0x7fc/0x10a0 [ 507.280474][ T7341] ? rcu_is_watching+0x15/0xb0 [ 507.280503][ T7341] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 507.280526][ T7341] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 507.280566][ T7341] ? mutex_lock_nested+0x152/0x1d0 [ 507.280587][ T7341] ? hci_error_reset+0x11f/0x4c0 [ 507.280616][ T7341] hci_error_reset+0x127/0x4c0 [ 507.280643][ T7341] ? process_scheduled_works+0xa20/0x14e0 [ 507.280670][ T7341] process_scheduled_works+0xa8e/0x14e0 [ 507.280710][ T7341] ? __pfx_process_scheduled_works+0x10/0x10 [ 507.280737][ T7341] ? do_raw_spin_lock+0x12b/0x2f0 [ 507.280760][ T7341] ? assign_work+0x3cf/0x5d0 [ 507.280788][ T7341] worker_thread+0xa47/0xfb0 [ 507.280828][ T7341] kthread+0x388/0x470 [ 507.280848][ T7341] ? __pfx_worker_thread+0x10/0x10 [ 507.280874][ T7341] ? __pfx_kthread+0x10/0x10 [ 507.280895][ T7341] ret_from_fork+0x514/0xb70 [ 507.280920][ T7341] ? __pfx_ret_from_fork+0x10/0x10 [ 507.280941][ T7341] ? __switch_to+0xc89/0x1420 [ 507.280972][ T7341] ? __pfx_kthread+0x10/0x10 [ 507.280993][ T7341] ret_from_fork_asm+0x1a/0x30 [ 507.281025][ T7341] [ 507.281033][ T7341] [ 507.281040][ T7341] Allocated by task 11850: [ 507.281076][ T7341] kasan_save_track+0x3e/0x80 [ 507.281095][ T7341] __kasan_kmalloc+0x93/0xb0 [ 507.281114][ T7341] __kmalloc_noprof+0x3e3/0x7a0 [ 507.281135][ T7341] sk_prot_alloc+0xe7/0x210 [ 507.281160][ T7341] sk_alloc+0x3a/0x390 [ 507.281183][ T7341] bt_sock_alloc+0x3b/0x340 [ 507.281208][ T7341] l2cap_sock_create+0x147/0x330 [ 507.281230][ T7341] bt_sock_create+0x163/0x240 [ 507.281248][ T7341] __sock_create+0x4b3/0x9d0 [ 507.281268][ T7341] __sys_socket+0xd6/0x1b0 [ 507.281288][ T7341] __x64_sys_socket+0x7a/0x90 [ 507.281308][ T7341] do_syscall_64+0x174/0x580 [ 507.281333][ T7341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.281352][ T7341] [ 507.281358][ T7341] Freed by task 11850: [ 507.281391][ T7341] kasan_save_track+0x3e/0x80 [ 507.281411][ T7341] kasan_save_free_info+0x40/0x50 [ 507.281435][ T7341] __kasan_slab_free+0x5c/0x80 [ 507.281453][ T7341] kfree+0x1c5/0x6c0 [ 507.281470][ T7341] __sk_destruct+0x754/0x9e0 [ 507.281495][ T7341] l2cap_sock_release+0x1b3/0x250 [ 507.281517][ T7341] sock_close+0xad/0x220 [ 507.281533][ T7341] __fput+0x42a/0xa80 [ 507.281567][ T7341] task_work_run+0x1d9/0x270 [ 507.281587][ T7341] exit_to_user_mode_loop+0x1fa/0x730 [ 507.281607][ T7341] do_syscall_64+0x353/0x580 [ 507.281631][ T7341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.281651][ T7341] [ 507.281656][ T7341] The buggy address belongs to the object at ffff8880388b8000 [ 507.281656][ T7341] which belongs to the cache kmalloc-4k of size 4096 [ 507.281700][ T7341] The buggy address is located 1940 bytes inside of [ 507.281700][ T7341] freed 4096-byte region [ffff8880388b8000, ffff8880388b9000) [ 507.281731][ T7341] [ 507.281737][ T7341] The buggy address belongs to the physical page: [ 507.281769][ T7341] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x388b8 [ 507.281791][ T7341] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 507.281809][ T7341] flags: 0x80000000000040(head|node=0|zone=1) [ 507.281827][ T7341] page_type: f5(slab) [ 507.281846][ T7341] raw: 0080000000000040 ffff88813fe0d140 dead000000000100 dead000000000122 [ 507.281864][ T7341] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 507.281884][ T7341] head: 0080000000000040 ffff88813fe0d140 dead000000000100 dead000000000122 [ 507.281902][ T7341] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 507.281919][ T7341] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 507.281936][ T7341] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 507.281948][ T7341] page dumped because: kasan: bad access detected [ 507.281958][ T7341] page_owner tracks the page as allocated [ 507.281966][ T7341] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11850, tgid 11849 (syz.5.1825), ts 502347290318, free_ts 501559603149 [ 507.282020][ T7341] post_alloc_hook+0x22d/0x280 [ 507.282070][ T7341] get_page_from_freelist+0x2877/0x28f0 [ 507.282094][ T7341] __alloc_frozen_pages_noprof+0x18d/0x380 [ 507.282118][ T7341] allocate_slab+0x77/0x660 [ 507.282164][ T7341] refill_objects+0x32b/0x3c0 [ 507.282187][ T7341] __pcs_replace_empty_main+0x372/0x720 [ 507.282214][ T7341] __kmalloc_noprof+0x526/0x7a0 [ 507.282233][ T7341] sk_prot_alloc+0xe7/0x210 [ 507.282257][ T7341] sk_alloc+0x3a/0x390 [ 507.282280][ T7341] bt_sock_alloc+0x3b/0x340 [ 507.282306][ T7341] l2cap_sock_create+0x147/0x330 [ 507.282329][ T7341] bt_sock_create+0x163/0x240 [ 507.282346][ T7341] __sock_create+0x4b3/0x9d0 [ 507.282366][ T7341] __sys_socket+0xd6/0x1b0 [ 507.282386][ T7341] __x64_sys_socket+0x7a/0x90 [ 507.282406][ T7341] do_syscall_64+0x174/0x580 [ 507.282431][ T7341] page last free pid 11850 tgid 11849 stack trace: [ 507.282443][ T7341] __free_frozen_pages+0x1019/0x1100 [ 507.282462][ T7341] __slab_free+0x252/0x2a0 [ 507.282481][ T7341] qlist_free_all+0x99/0x100 [ 507.282509][ T7341] kasan_quarantine_reduce+0x148/0x160 [ 507.282538][ T7341] __kasan_slab_alloc+0x22/0x80 [ 507.282566][ T7341] __kmalloc_noprof+0x395/0x7a0 [ 507.282585][ T7341] tomoyo_realpath_from_path+0xef/0x640 [ 507.282608][ T7341] tomoyo_path_number_perm+0x246/0x5f0 [ 507.282634][ T7341] security_file_ioctl+0xc3/0x2a0 [ 507.282663][ T7341] __se_sys_ioctl+0x47/0x170 [ 507.282683][ T7341] do_syscall_64+0x174/0x580 [ 507.282707][ T7341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.282726][ T7341] [ 507.282732][ T7341] Memory state around the buggy address: [ 507.282775][ T7341] ffff8880388b8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 507.282790][ T7341] ffff8880388b8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 507.282827][ T7341] >ffff8880388b8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 507.282837][ T7341] ^ [ 507.282848][ T7341] ffff8880388b8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 507.282862][ T7341] ffff8880388b8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 507.282873][ T7341] ================================================================== [ 507.282885][ T7341] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 507.282904][ T7341] CPU: 0 UID: 0 PID: 7341 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 507.282933][ T7341] Tainted: [L]=SOFTLOCKUP [ 507.282941][ T7341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 507.282954][ T7341] Workqueue: hci5 hci_error_reset [ 507.282982][ T7341] Call Trace: [ 507.282991][ T7341] [ 507.282999][ T7341] vpanic+0x56c/0xa60 [ 507.283025][ T7341] ? __pfx_vpanic+0x10/0x10 [ 507.283052][ T7341] panic+0xc5/0xd0 [ 507.283075][ T7341] ? __pfx_panic+0x10/0x10 [ 507.283099][ T7341] ? do_raw_spin_lock+0x28b/0x2f0 [ 507.283122][ T7341] ? do_raw_spin_lock+0x28b/0x2f0 [ 507.283142][ T7341] ? do_raw_spin_lock+0x28b/0x2f0 [ 507.283160][ T7341] check_panic_on_warn+0x89/0xb0 [ 507.283182][ T7341] ? do_raw_spin_lock+0x28b/0x2f0 [ 507.283200][ T7341] end_report+0x73/0x170 [ 507.283222][ T7341] ? do_raw_spin_lock+0x28b/0x2f0 [ 507.283241][ T7341] kasan_report+0x128/0x150 [ 507.283265][ T7341] ? do_raw_spin_lock+0x28b/0x2f0 [ 507.283289][ T7341] do_raw_spin_lock+0x28b/0x2f0 [ 507.283307][ T7341] ? rcu_is_watching+0x15/0xb0 [ 507.283335][ T7341] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 507.283354][ T7341] ? lock_acquire+0x5f/0x350 [ 507.283377][ T7341] ? rcu_is_watching+0x15/0xb0 [ 507.283403][ T7341] ? rcu_is_watching+0x15/0xb0 [ 507.283431][ T7341] _raw_spin_lock_irqsave+0x4c/0x60 [ 507.283454][ T7341] rt_spin_lock+0x157/0x400 [ 507.283475][ T7341] ? __pfx_rt_spin_lock+0x10/0x10 [ 507.283496][ T7341] ? __local_bh_disable_ip+0x205/0x420 [ 507.283521][ T7341] ? bt_accept_unlink+0x61/0x2f0 [ 507.283560][ T7341] bt_accept_unlink+0x7d/0x2f0 [ 507.283591][ T7341] ? bt_accept_unlink+0x61/0x2f0 [ 507.283623][ T7341] l2cap_sock_teardown_cb+0x17e/0x490 [ 507.283651][ T7341] l2cap_chan_del+0xb5/0x610 [ 507.283677][ T7341] ? l2cap_conn_del+0x337/0x570 [ 507.283701][ T7341] l2cap_conn_del+0x343/0x570 [ 507.283727][ T7341] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 507.283751][ T7341] hci_conn_hash_flush+0x105/0x260 [ 507.283779][ T7341] hci_dev_close_sync+0x7fc/0x10a0 [ 507.283801][ T7341] ? rcu_is_watching+0x15/0xb0 [ 507.283830][ T7341] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 507.283853][ T7341] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 507.283878][ T7341] ? mutex_lock_nested+0x152/0x1d0 [ 507.283899][ T7341] ? hci_error_reset+0x11f/0x4c0 [ 507.283928][ T7341] hci_error_reset+0x127/0x4c0 [ 507.283955][ T7341] ? process_scheduled_works+0xa20/0x14e0 [ 507.283982][ T7341] process_scheduled_works+0xa8e/0x14e0 [ 507.284021][ T7341] ? __pfx_process_scheduled_works+0x10/0x10 [ 507.284047][ T7341] ? do_raw_spin_lock+0x12b/0x2f0 [ 507.284069][ T7341] ? assign_work+0x3cf/0x5d0 [ 507.284097][ T7341] worker_thread+0xa47/0xfb0 [ 507.284134][ T7341] kthread+0x388/0x470 [ 507.284155][ T7341] ? __pfx_worker_thread+0x10/0x10 [ 507.284181][ T7341] ? __pfx_kthread+0x10/0x10 [ 507.284203][ T7341] ret_from_fork+0x514/0xb70 [ 507.284226][ T7341] ? __pfx_ret_from_fork+0x10/0x10 [ 507.284248][ T7341] ? __switch_to+0xc89/0x1420 [ 507.284277][ T7341] ? __pfx_kthread+0x10/0x10 [ 507.284299][ T7341] ret_from_fork_asm+0x1a/0x30 [ 507.284331][ T7341] [ 507.284492][ T7341] Kernel Offset: disabled